Valid CAS-004 Dumps shared by ExamDiscuss.com for Helping Passing CAS-004 Exam! ExamDiscuss.com now offer the newest CAS-004 exam dumps, the ExamDiscuss.com CAS-004 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CAS-004 dumps with Test Engine here:
A security researcher detonated some malware in a lab environment and identified the following commands running from the EDR tool: With which of the following MITRE ATT&CK TTPs is the command associated? (Select TWO).
Correct Answer: B,E
OS credential dumping is the process of obtaining account login and password information, normally in the form of a hash or a clear text password, from the operating system and software. System information discovery is the process of gathering information about the system, such as hostname, IP address, OS version, running processes, etc. Both of these techniques are commonly used by adversaries to gain access to sensitive data and resources on the target system. The command shown in the image is using Mimikatz, a tool that can dump credentials from memory, and also querying the system information using WMIC. Verified References: * https://attack.mitre.org/techniques/T1003/ * https://attack.mitre.org/techniques/T1082/ * https://github.com/gentilkiwi/mimikatz * https://docs.microsoft.com/en-us/windows/win32/wmisdk/wmic