Exploring Scripting Tools and Analysis Concepts

Question 1

Powershell(PS)

Answer 1

A command shell and scripting language built on the .NET Framework that uses cmdlets for Windows automation.

Question 2

Windows Management Instrumentation Command-Line (WMIC)

Answer 2

A tool that provides an interface into Windows Management Instrumentation (WMI) for local or remote management of computers.

Question 3

Python

Answer 3

A high-level programming language that is widely used for automation.

Question 4

Regular expressions (regex)

Answer 4

A group of characters that describe how to execute a specific search pattern on a given text.

Question 5

JavaScript Object Notation (JSON)

Answer 5

A file format that uses attribute-value pairs to define configurations in a structure that is easy for both humans and machines to read and consume.

Question 6

Extensible Markup Language (XML)

Answer 6

A system for structuring documents so that they are human and machine readable. Information within the document is placed within tags, which describe how information within the document is structured.

Question 7

Regular expressions

Answer 7

utility can be used to match patterns of data, such as locating phone or credit card numbers

Question 8

User account authentication events

Answer 8

type of events are contained in the file identified in the previous question