CompTIA CySA+ complete index with explanation

host-based firewall

A type of firewall that resides on a single host and is designed to protect that host only.

hunt teaming

A proactive threat hunting tactic in which a team works together to detect, identify, and understand advanced and determined threat actors. It is a new proactive approach to security that is offensive in nature rather than defensive, which has been common for security teams in the past.

hybrid cloud

A cloud deployment model in which an organization provides and manages some resources in-house and has others provided externally via a public cloud.

imaging

Creating a bit-level image of the disk.

impact analysis

Analysis that determines impact of the event.

impersonation

Sending e-mail that appears to come from someone else.

incident command system (ICS)

Designed to provide a way to enable effective and efficient domestic incident management by integrating a combination of facilities, equipment, personnel, procedures, and communications operating within a common organizational structure.

incident form

A form that is used to describe the incident in detail.

incident response

A formal process or set of procedures for responding to cybersecurity incidents.

incident summary report

A document that summarizes the incident.

indicator management

Process of collecting and analyzing indicators of compromise (IOCs).

indicator of compromise (IOC)

Any activity, artifact, or log entry that is typically associated with an attack of some sort.

inference

Occurs when someone has access to information at one level that allows her to infer information about another level.

Infrastructure

Corner of the Diamond Model that describes the set of systems an attacker uses to launch attacks.

Infrastructure as a Service (IaaS)

Cloud service model in which the vendor provides the hardware platform or data center, and the company installs and manages its own operating systems and application systems.

infrastructure as code (IaC)

Manages and provisions computer data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.

input validation

The process of checking all input for issues such as proper format and proper length.

insecure object reference

A process that occurs when a user has permission to use an application but is accessing information to which she should not have access.

integer overflow

Occurs when math operations try to create a numeric value that is too large for the available space.

integrated intelligence

The consideration and analysis of intelligence data from a perspective that combines multiple data sources and attempts to make inferences based on this data integration.