From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Social engineering

Social engineering

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 1 Threat Management

Start my 1-month free trial

Social engineering

- [Instructor] As security analysts seek to understand an organization's security environment, they must also understand how adversaries gather information about the organization's networks. This involves the tools of reconnaissance that may be used to collect information about a target. While we will discuss a number of technical tools that attackers used to conduct reconnaissance, it's important to understand that social engineering attacks can be just as useful to attackers. Social engineering attacks use psychological tricks to manipulate people into performing an action or divulging sensitive information that undermines the organization's security. For example, an attacker posing as a helpdesk technician might use social engineering to trick a user into revealing his or her password over the telephone. Essentially, social engineering attacks are the online version of running a con. There are six main reasons that social…

Contents