About this interactive
Each card is what a responder found on one machine: where the malicious code is kept and what, if anything, starts it. The file scan is the lesson's kind, which checks the files saved on the drive. Predict whether the scan finds the malware, and whether the malware executes again after the machine restarts.
What you'll learn
- Predict whether a file scan will find malware from where its code is kept: in a file saved on the drive, or only in memory or in the system's settings
- Predict whether malware will execute again after a restart from what, if anything, is set to launch it at startup
Aligned to
CompTIA Security+
2.4
Given a scenario, analyze indicators of malicious activity.
Key terms
- Fileless Malware
- Malware that resides in a system's RAM rather than on disk, evading traditional file-based antivirus detection.
- Persistence
- A MITRE ATT&CK tactic in which an adversary maintains their foothold within a compromised network to survive restarts, credential changes, or other interruptions.
- Antivirus
- Software designed to detect, prevent, and remove malicious software from a system.
Topics
Fileless Malware
Persistence
Interactive
Predict
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →