What will a threat actor do to create a back door on a compromised target according to the Cyber Kill Chain model?
- Collect and exfiltrate data.
- Add services and autorun keys.
- Obtain an automated tool to deliver the malware payload.
- Open a two-way communications channel to the CnC infrastructure.
| Answers Explanation & Hints:
Once a target system is compromised, the threat actor will establish a back door into the system to allow for continued access to the target. Adding services and autorun keys is a way to create a point of persistent access. |