Virtual Labs

Tools

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Detecting TOR Browser on a Machine

Choose difficulty:

Beginner

Intermediate

Advanced

What information can be obtained from a prefetch file when analyzing the presence of the TOR browser?

a: The contents of all visited websites Explanation

Explanation

b: The executable name, path, and the number of times the application was run Explanation

Explanation

c: The encryption key used by the TOR browser Explanation

Explanation

d: The user's browsing history Explanation

Explanation

Which tool is used to analyze prefetch files for detecting the TOR browser?

a: Wireshark Explanation

Explanation

b: PEcmd Explanation

Explanation

c: Process Monitor Explanation

Explanation

d: Netcat Explanation

Explanation

How can the netstat command be useful in detecting TOR browser activity?

a: It logs all user interactions with the TOR browser Explanation

Explanation

b: It displays active network connections and ports used by the TOR browser Explanation

Explanation

c: It decrypts the traffic between the TOR browser and websites Explanation

Explanation

d: It blocks TOR browser from accessing the internet Explanation

Explanation

Why is detecting TOR browser usage important in corporate environments?

a: It automatically improves system performance Explanation

Explanation

b: It may indicate potential insider threats or attempts to bypass network policies Explanation

Explanation

c: It ensures faster internet browsing Explanation

Explanation

d: It prevents malware infection Explanation

Explanation

Which network analysis tool can help trace anonymized traffic generated by TOR?

a: Wireshark Explanation

Explanation

b: Notepad Explanation

Explanation

c: Disk Cleanup Explanation

Explanation

d: Paint Explanation

Explanation

What metadata does a prefetch file contain that aids in TOR browser detection?

a: User browsing passwords Explanation

Explanation

b: Application executable path, last run time, and run count Explanation

Explanation

c: TOR network encryption keys Explanation

Explanation

d: Websites visited through TOR Explanation

Explanation

Community Links Sakshat Portal Outreach Portal FAQ: Virtual Labs

AGPL 3.0 & Creative Commons (CC BY-NC-SA 4.0)