The Falcon sensor is designed to provide deep visibility into endpoint activity, yet it is not omniscient. According to the Cyber Kill Chain model, which of the following stages does the Falcon sensor typically NOT have visibility over?
A.
Exploitation of a memory-resident vulnerability
B.
Installation of a persistent backdoor
C.
Weaponization of a malicious payload on the adversary ' s infrastructure
D.
Delivery of a malicious document via an encrypted email attachment
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit