This technique is used by attackers to hide the presence of components like programs, files, and network connections by hooking into the OS and intercepting system API calls. It can reside at the…

The correct answer is B. Rootkit. A rootkit embeds itself at the user or kernel level, intercepting and tampering with operating‑system API calls to conceal files, processes, registry keys, and network connections from standard system utilities.

Introduction to Cybersecurity and Splunk

Question

This technique is used by attackers to hide the presence of components like programs, files, and network connections by hooking into the OS and intercepting system API calls. It can reside at the user or kernel level. What technique is this?

Options

ASpear phishing
BRootkit
CGuardrails
DSession hijacking

How the community answered

(23 responses)

B
91% (21)
C
4% (1)
D
4% (1)

Explanation

A rootkit embeds itself at the user or kernel level, intercepting and tampering with operating‑system API calls to conceal files, processes, registry keys, and network connections from standard system utilities.

Topics

#rootkit#malware techniques#OS hooking#kernel-level attack

Community Discussion

No community discussion yet for this question.

Full SPLK-5001 Practice