Ransomware - ✔️✔️Malicious software that encrypts and locks the contents and files
of computers and demands a ransom for the encryption to unlock the data.
The Protection Cycle - ✔️✔️1) Visibility
2) Detection
3) Remediation/response
4) Prevention
Visibility - ✔️✔️(Protection Cycle)Trace every action taken by running applications.
Detection - ✔️✔️(Protection Cycle)Monitor active processes and preform real-time
blocking of zero-day attacks, targeted attacks, and other advanced threats designed to
bypass traditional antivirus and anti-malware solutions.
Zero-day attacks and APTs - ✔️✔️New threats that have never been seen before
Fileless malware - ✔️✔️Malicious software that runs in memory instead of as a
physical file on the endpoint.
How does fileless malware operate? - ✔️✔️Exploits trusted processes in memory to
remain undetected.
"Living Off- the Land" Attack - ✔️✔️Attacks where a malicious user gain access to an
endpoint and uses legitimately installed software to perform further attacks.
Exploits - ✔️✔️A software tool designed to take advantage of a flaw in a computer
system.
Remediation/response - ✔️✔️(Protection Cycle)Use collected forensic information to
complete in-depth analysis of every attempted attack.
Prevention - ✔️✔️(Protection Cycle)Edit the protection model settings and patches for
vulnerabilities
Watchguard Endpoint Protection Platform (EPP) - ✔️✔️(Watchguard Endpoint
Security) Protects endpoints from threats and reduces the attack surface. Includes a full
range of protection features(antivirus, firewall, device control, URL filtering)