The JK Journal

  The principle of least privilege in action As a security analyst, you may encounter a situation like this one: There’s a file called bonuses.txt within a compensation directory. The owner of this file is a member of the Human Resources department with a username of hrrep1 . It has been decided that hrrep1 needs access to this file. But, since this file contains confidential information, no one else in the hr group needs access. You run ls -l to check the permissions of files in the compensation directory and discover that the permissions for bonuses.txt are -rw-rw---- . The group owner type has read and write permissions that do not align with the principle of least privilege.   To remedy the situation, you input chmod g-rw bonuses.txt . Now, only the user who needs to access this file to carry out their job responsibilities can access this file. examples to check permissions- https://docs.google.com/document/d/1jl9kN7WbrdRwgJw7urDYLPE_JenWoP7MRY1N0GgpG48/template/...

 OS Windows, macOS, Linux, ChromeOS, Android, and iOS are all commonly used operating systems. Security analysts should be aware of vulnerabilities that affect operating systems. It’s especially important for security analysts to be familiar with legacy operating systems, which are systems that are outdated but still being used. When you press the power button,  you're interacting with the hardware.  This boots the computer and  brings up the operating system.  Booting the computer means that  a special microchip called a BIOS is activated.  On many computers built after 2007,  the chip was replaced by the UEFI( Unified Extensible Firmware Interface ).  Both BIOS and UEFI contain booting instructions that are  responsible for loading a special program  called the bootloader.  Then, the bootloader is  responsible for starting the operating system. An application is a program  that performs a specific task.  When y...