- [Instructor] Command and control is the face
when the attacker accesses the bridge system.
Sometimes this is accomplished by listening to a beacon
coming from the target, informing the adversary
that a command and control channel, or, you know
CNC or C2, you know, depending on who you ask,
you know the different have
different combinations of names for this.
But the command and control channel it, you know,
may be actually available to access by that attacker, right?
So sometimes the adversary must manually attempt to connect
to the target system using a specific port.
And that actually specific port can be actually
be used to test if the installation
of the malicious software was actually successful
on the victim's, you know, system.
Now, the end result
of this phase is providing adversary with, you know
a complete access inside the target environment,
and to be able to just like the word says
take command and control of that environment
or the compromised systems, right?
So it is important to point out
that there are different levels of user
and network rights that actually can be, or not be available
to an adversary at this stage of the attack, right?
Now, this is why identity management
and access control systems
and methodologies are extremely important for ensuring
that only the necessary services are provisioned to host
and systems in the network.