4
votes
Accepted
What does "Obtaining a CVE" mean
When someone discovers a vulnerability, they can request a Common Vulnerabilities and Exposures (CVE) id. This id will be linked to the vulnerability and is linked to you as a person.
Whether it is ...
- 5,851
3
votes
Accepted
Is it wrong to refer to ptrace process injection as process hollowing
Process hollowing is commonly performed by creating a process in a suspended state then unmapping/hollowing its memory, which can then be replaced with malicious code.
You would not call ptrace-based ...
- 67.3k
2
votes
How long it takes to receive CVE-ID from cve.mitre.org?
It seems for most cases cve assigned automatically in next 24 hours. When they have technical issues they post them at https://cve.mitre.org/news/. I had an issue due to badly configured filters in my ...
2
votes
What's the difference between OVAL definitions, objects, and tests?
I am not an expert in OVAL, but here is my thoughts.
Generator is just a metadata. I have a product_name, schema_version and timestamp blocks in it.
Definitions is something like a book cover. In ...
- 139
1
vote
Accepted
MITRE ATT&CK Design and Philosophy doc: "Process hollowing sub-technique can't be under Priviledge Escalation tactic"
This passage is pointing out that the parent technique is part of a tactic but the sub-techniques may not be used for that tactic.
In the example they use, both the Defense Evasion tactic and ...
- 2,270
1
vote
Is it called Drive-by Compromise if attacker provided his website for user to access?
Both are types of Drive-By Compromise. It doesn't matter who owns the site. What matters is that the client is compromised by simply processing the malicious code delivered by the site.
- 132k
1
vote
Accepted
What is the difference between ATT&CK and CAPEC?
MITRE actually maintains a page describing the differences between the two and another page defining "tactics", "techniques", and "procedures". The rest of this answer ...
- 440
Only top scored, non community-wiki answers of a minimum length are eligible