Which term refers to the activities carried out by an attacker to hide malicious acts?

Which term refers to the activities carried out by an attacker to hide malicious acts?

• A. Defensive Information Warfare
• B. Clearing Tracks
• C. Reconnaissance
• D. Information Security Management Program

Answer: (B)

Hiding attacker activity by erasing or obscuring digital evidence is the focus here. After gaining access and performing malicious steps, an attacker will often try to reduce the chance of being detected by removing traces of their actions, tampering with logs, deleting or altering files, and cleaning up command histories. This practice is known as clearing tracks, and it falls under anti-forensics, aiming to maintain stealth and prolong access. Reconnaissance, by contrast, is about gathering information on the target to plan the intrusion, not about post-attack concealment. Defensive Information Warfare refers to protective, defensive operations rather than attacker behavior. An Information Security Management Program concerns how an organization manages information security at a governance level, not the attacker’s actions after breaching a system.

Hiding attacker activity by erasing or obscuring digital evidence is the focus here. After gaining access and performing malicious steps, an attacker will often try to reduce the chance of being detected by removing traces of their actions, tampering with logs, deleting or altering files, and cleaning up command histories. This practice is known as clearing tracks, and it falls under anti-forensics, aiming to maintain stealth and prolong access.

Reconnaissance, by contrast, is about gathering information on the target to plan the intrusion, not about post-attack concealment. Defensive Information Warfare refers to protective, defensive operations rather than attacker behavior. An Information Security Management Program concerns how an organization manages information security at a governance level, not the attacker’s actions after breaching a system.