Skip to content

Glossary: Security Operations and Incident Response

Worm

Also written: worm scanning

Malware that spreads by itself. An infected PC rapidly tries many addresses on one port, such as SMB 445, which shows up in firewall or IDS logs.

Where the book teaches it

Related terms

SMB (Server Message Block, port 445)Device logs