Hello and congratulations
on the successful completion of
another phase of the
framework and our journey through
the application of the modern attack
framework and this particular
module, what should we know
now?
What we should know that
exfiltration is when a threat actor
is trying to steal information
or data and remove it from your
network, then it consists of
techniques that can include things
like compression and encryption
to attempt to avoid protections.
We should now have a high level
understanding of what automated
exfiltration is, why
data compression would be important
in exfiltration attempts,
and what data transfer size
limits are within the context
of this phase.
We also looked at mitigation and
detection techniques to include
network intrusion prevention
techniques and user awareness
training and doing things again
like baseline network activity
for comparison against
day to day operations to really see
if we've got a threat factor on
those systems and if there's
anything that's happening that is
out of the norm.
Remember, if you haven't identified
baselines and you don't understand
what normal is, you really don't
have the ability to identify
what abnormal is as well.
So with that in mind, I want to
thank you for your time today, and I
look forward to seeing you again
soon.