QuestionQ20

Threat Hunting Techniques

Refer to the exhibit.

Question Image

A security engineer observes that a Windows Batch script contains calls to suspicious APIs. How will the script affect the system when executed?

Explanation

CryptEncrypt encrypts data using a cryptographic key. Together with the key-acquisition, key-derivation, and hashing APIs present, it indicates that the program has encryption functionality and can encrypt files.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!