Câu 13: 300-220: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

A hacking group targets a construction company by sending emails that contain a malicious macro. An employee at the company executes the macro, and a PowerShell command is executed that downloads a file with further instructions from a website. The malware installs a keylogger on the employee’s computer and reports keystrokes to a C2 server. What is being used according to the MITRE ATT&CK framework?

1. A. ingress tool transfer — đáp án hiện tại
2. B. fallback channels
3. C. drive-by compromise
4. D. indirect command execution