How to audit Windows Task Scheduler to detect attacks

How to audit Windows Task Scheduler to detect attacks

Assessment

Interactive Video

Architecture

University

Practice Problem

Hard

Created by

Wayground Content

FREE Resource

The video tutorial discusses the importance of auditing in systems, particularly in the context of a Windows 7 Zero Day vulnerability identified by Google. It emphasizes the need for enabling specific auditing settings, such as audit object access, to detect and prevent attacks. The tutorial provides step-by-step instructions on configuring these settings and using command line tools to monitor system activities. It concludes with recommendations for effective auditing to safeguard against targeted attacks.

Read more

2 questions

Show all answers

1.

OPEN ENDED QUESTION

3 mins • 1 pt

How can you check what auditing categories are already enabled on your system?

Evaluate responses using AI:

OFF

2.

OPEN ENDED QUESTION

3 mins • 1 pt

Why might an organization choose to enable object auditing for both success and failure events?

Evaluate responses using AI:

OFF

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Google

Continue with Google

Email

Continue with Email

Classlink

Continue with Classlink

Clever

Continue with Clever

or continue with

Microsoft

Microsoft

Apple

Apple

Others

Others

Already have an account?