300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CybersecurityDemo

Question

An attacker changes the extension of a malicious file named TOPSECRET0123456789 from .png to .doc in an effort to evade detection. Which technique is used to disguise the file?

A spoofing
B hashing
C obfuscation
D steganography

Explanation

Spoofing disguises a malicious file by presenting it as a different, more benign file type, such as by changing its extension. MITRE ATT&CK classifies this behavior as masquerading a file type.

Learn more

MITRE ATT&CK: Masquerade File Type (T1036.008)

300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CybersecurityDemo

AstroTutor

Notes

Readiness

QuestionQ117

Community Discussion