Câu 42: GCFA: GIAC Certified Forensic Analyst

You work as a Web developer for ABC Inc. You want to investigate the Cross-Site Scripting attack on your company's Web site. Which of the following methods of investigation can you use to accomplish the task?Each correct answer represents a complete solution. Choose all that apply.

1. A. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site. — đáp án hiện tại
2. B. Look at the Web server's logs and normal traffic logging. — đáp án hiện tại
3. C. Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
4. D. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers. — đáp án hiện tại