312-39V2: Certified SOC Analyst v2

A SOC team at a major financial institution detects unauthorized-access attempts on its web application. The security team reviews the logs and finds that the web application has been compromised.

To identify the exact attack technique used and implement the necessary mitigation measures, forensic investigators are assessing cookie attributes (such as HttpOnly, Secure, and SameSite) for security weaknesses and tracking anomalous request patterns that depart from normal user behavior. Which of the following attack vectors is the forensic team investigating?