Skip to content

Glossary: Threat Vectors: Files, Networks and Endpoints

baseline

A record of what normal activity looks like on a system. If Alex never uses certutil to download files, any such download stands out against the baseline.

Where the book teaches it

Related terms

living off the land (LOTL)Windows event IDs (4688, 4104)