Situational Awareness

Situational awareness involves knowing where you are, and what is going on around you. For an attacker, figuring out where you are might seem to be a simple task, but it can be made more difficult by a variety of factors. Finding out what is going on around you can be much more difficult.

  • Normal positional and status awareness
  • Analyzing protocols – what protocols are running on the target system and how can they be used
  • Analyzing defenses – what defensive measures are being used on the target system (AV, IDS/IPS, logging…)
  • Detecting virtual machines
  • Detecting honey pots

Leave a Reply

You must be logged in to post a comment.