CS0-003 · Question #482
An analyst receives an alert for suspicious IIS log activity and reviews the following entries: 2024-05-23 15:57:05 10.203.10.16 HEAT / - 80 - 10.203.10.17 DirBuster- 1.0- .. Which of the following…
The correct answer is B. An attacker is conducting reconnaissance of the website. The logs indicate that the OWASP DirBuster tool is being used. This tool is designed for directory brute-forcing to find hidden files or directories on a web server, which aligns with reconnaissance activities. The series of GET and HEAD requests further confirm directory and…
Question
An analyst receives an alert for suspicious IIS log activity and reviews the following entries:
2024-05-23 15:57:05 10.203.10.16 HEAT / - 80 - 10.203.10.17 DirBuster- 1.0- .. Which of the following will the analyst infer from the logs?
Options
- AAn attacker is performing network lateral movement.
- BAn attacker is conducting reconnaissance of the website.
- CAn attacker is exfiltrating data from the network.
- DAn attacker is cloning the website.
How the community answered
(42 responses)- A5% (2)
- B81% (34)
- C12% (5)
- D2% (1)
Explanation
The logs indicate that the OWASP DirBuster tool is being used. This tool is designed for directory brute-forcing to find hidden files or directories on a web server, which aligns with reconnaissance activities. The series of GET and HEAD requests further confirm directory and file enumeration
Topics
Community Discussion
No community discussion yet for this question.