One concept at a time.
Look up a question, explore a topic, or follow a connection. Every note is a small piece of a bigger picture.
Abuse Elevation Control Mechanism
Elevation-control abuse bypasses or misuses mechanisms governing privileged execution.
Acceptance criteria
Define observable conditions for a deliverable to be accepted.
Access control
Understand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.
Access Token Manipulation
Access token manipulation changes or adopts operating-system security contexts.
Account Access Removal
Account access removal disrupts legitimate users by changing, deleting, or restricting their identities.
Account Discovery
Account discovery enumerates identities available in a system or environment.
Account Manipulation
Account manipulation changes identity settings to preserve or expand access.
Acquire Infrastructure
Infrastructure acquisition obtains domains, servers, or other resources used to support operations.
Active Scanning
Active scanning probes target infrastructure to learn reachable services or weaknesses.
Adversary in the middle
An intermediary may observe or alter a communication path.
AES
A symmetric block cipher whose safe use depends on its mode and implementation.
Agile delivery
Use short feedback cycles to adapt toward a useful outcome.
AI agent security
Constrain AI agents through tool-level authorization, bounded credentials, trusted approvals, and tests of malicious content across execution and memory.
Alert triage
Decide what the signal means, how urgent it is, and who owns the next step.
API security testing
Test API permissions and workflow invariants using separate actors, expected outcomes, and minimal reproducible evidence within an authorized scope.
Application Layer Protocol
Application-layer command traffic uses protocols already common in the environment.
Application security logging
Application security logging records meaningful decisions and events that infrastructure logs cannot fully explain.
Application Window Discovery
Application window discovery enumerates visible application windows to learn what a person is doing.
Archive Collected Data
Archiving collected data packages information for easier staging or transfer.
ARP and local address resolution
Understand IPv4 local address resolution, the gateway’s role, and why an ARP entry is a forwarding clue rather than authenticated identity.
Asset inventories
Know what exists, who owns it, and why it matters.
Asymmetric cryptography
Explore public and private keys, encryption, signatures, and key agreement without confusing their different purposes.
Attack surface
Identify the reachable interfaces and trust relationships that could be misused.
Audio Capture
Audio capture records conversations or other sound available through an accessed device or application.
Authentication
Understand how authentication verifies an account, how login sessions work, and why recovery and multifactor methods matter.
Authorization
Learn how applications check permission for individual resources and actions, with an invoice example and practical access tests.
Automated Collection
Automated collection repeatedly gathers internal information according to rules or triggers.
Automated Exfiltration
Automated exfiltration repeatedly transfers collected information without requiring manual action for each item.
Availability
Make the required service accessible to authorized users when it is needed.
Backlogs and prioritization
Order work by value, risk, dependencies, and learning needs.
Backups and restore testing
Design recoverable backups around independent failure boundaries, required keys, restore objectives, and realistic service validation.
Bell–LaPadula model
A formal model focused on confidentiality across classification levels.
Biba integrity model
Protect trusted information from less trustworthy inputs.
BITS Jobs
BITS job abuse uses Windows background transfer functionality for unauthorized transfers or recurring activity.
Boot or Logon Autostart Execution
Boot or logon autostart execution runs a program when a system starts or a user signs in.
Boot or Logon Initialization Scripts
Boot and logon initialization scripts can establish repeatable execution when a machine starts or a user signs in.
Bot management and anti-automation
Protect valuable workflows against abusive automation while preserving legitimate integrations, accessibility, and measurable false-positive handling.
Botnets
A coordinated set of compromised systems can perform distributed activity.
Broken access control
An application allows an action or resource access that its policy should deny.
Browser artifacts
History, cache, and profile records describe different parts of browsing activity.
Browser Information Discovery
Browser information discovery reads browser-related data to learn about a user or environment.
Browser Session Hijacking
Browser session hijacking interferes with an active browser session or its content.
Brute-force attacks
Try candidates until a valid secret or answer is found.
Budgeting and resources
Plan the full cost and capacity needed to deliver and sustain the change.
Build Image on Host
Building an image on a host creates a workload artifact locally rather than retrieving the completed image from a registry.
Business continuity
Keep critical activities functioning through disruption.
Business impact analysis
Learn what disruption does to the organization and which services matter first.
Business logic vulnerabilities
Model allowed workflow states and transaction invariants, then test repeated, reordered, and concurrent actions that remain syntactically valid.
Showing 48 of 500 matching notes