As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?

Malicious code designed to execute in concurrence with a particular event is BEST defined as which of the following?

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

A security professional discovers a new ransomware strain that disables antivirus on the endpoint during an infection. Which location would be the BEST place for the security professional to find technical information about this malware?

A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?