Global Industrial Cyber Security Professional (GICSP)

At which offset of ~/GIAC/memdump/raw_key_13 does binwalk indicate is the beginning of the binary file?

The file ~/GIAC/hickory.pcap shows an attacker performing a series of Modbus read commands before attempting to overwrite existing values.

Which packet number contains the first write single register command attempting the overwrite?

What are the last four digits of the hash created when using openssl with the md5 digest on ~/GIAC/film?

Use sqlmap to dump tables from http://localhost/index.php? page-login.php. The data necessary for this is as follows:

user_name=j password=p Submit_button=Submit - How many tables does sqlmap find in the dojo_control database? Hint: The option to dump tables is --tables

Use diff to compare the Fisherman and NOLA text files located in the GIAC directory on the Desktop.

Which word exists in one file, that does not exist in the other?

From the GIAC directory on the Desktop, open gicsp.pcap in Wireshark and filter for USB Capture data.
Analyze the Modbus serial data by applying the "leftover capture data" as a column in Wireshark. In packet 28, what read function is requested? Use the protocol description in the image.

What does the following command accomplish?
$ chroot /home/jdoe /bin/bash

Which of the following is located in user mode of a typical real-time OS, but in kernel mode of a typical standard OS?

Which of the following is a protocol that will provide control center-to-control center SCADA communications in a situation where each of the control centers implement a different vendor-supplied protocol internally?

What is a characteristic of the Ladder Diagram approach for programming controllers?