Hacker

Hacker: Person who analyzes or modifies technical systems or bypasses security mechanisms. The term describes an attack methodAttack MethodA defined way in which an attacker attempts to compromise a target or achieve an objective., a malicious componentMalicious ComponentCode, content, or infrastructure that performs or supports malicious activity., or a threat scenario. Protection requires a combination of preventionPreventionMeasures intended to stop security incidents or attacks before they occur., detectionDetectionThe capability to identify suspicious activity, attacks, or policy violations in time., containmentContainmentActions that limit the scope, spread, and impact of an active security incident., recoveryRecoveryThe controlled restoration of systems, data, and business services after a disruption., and awareness-raising.

How it works and where it fits

Hacker structures knowledge about potential adversaries, their objectives, capabilities, infrastructure, and observed behavior. Individual indicators are short-lived and easy to change, while behavioral patterns and technical relationships often have greater analytical value. Reporting should distinguish observed facts, assessments, and assumptions.

Practical security relevance

Practical use depends on source quality, timeliness, and relevance to the organization’s own attack surface. Information is prioritized, correlated with internal data, and converted into searches, detections, or safeguards. Investigation feedback continuously improves the assessment. Confidentiality and permitted sharing are as important as technical exchange formats.

Related concepts

• Offensive SecurityOffensive SecurityAuthorized testing of systems using methods employed by real-world attackers.: Authorized testing of systems using methods employed by real-world attackers.
• Penetration TestPenetration TestAn authorized attack test conducted to practically assess vulnerabilities.: An authorized attack test conducted to practically assess vulnerabilities.
• Red TeamRed TeamSimulates realistic attacks to test people, processes, and technology.: Simulates realistic attacks to test people, processes, and technology.
• Threat ActorThreat ActorAn individual, group, or organization that intentionally carries out or supports cyberattacks.: An individual, group, or organization that intentionally carries out or supports cyberattacks.