Module objectives
Threats & Malware
Most intrusions come down to a piece of malware delivered by manipulating a person, then a sequence of attacker behaviours you can name and detect. This module covers all three layers.
By the end you will be able to:
- Classify any malware sample by how it spreads and what it does, from worms and trojans to ransomware, rootkits and fileless malware.
- Recognise the psychological levers behind social engineering and tell the phishing family apart, from spear phishing and whaling to pretexting and baiting.
- Describe attacker behaviour with MITRE ATT&CK (v19.1), mapping a technique to the tactic it serves.
- Tell durable TTPs from brittle IOCs and place an indicator on the Pyramid of Pain.
The exam is practical: ten artifacts to read and classify, graded in your browser. Get seven of ten and the certificate is yours.