An engineer is analyzing a .LNK (shortcut) file recently received as an email attachment and blocked by email security as suspicious. What is the next step an engineer should take?
A. Open the file in a sandbox environment for further behavioral analysis as the file contains a malicious script that runs on execution.
B. Upload the file to a virus checking engine to compare with well-known viruses as the file is a virus disguised as a legitimate extension.
C. Quarantine the file within the endpoint antivirus solution as the file is a ransomware which will encrypt the documents of a victim.
D. Delete the suspicious email with the attachment as the file is a shortcut extension and does not represent any threat.
Answer:A
An engineer is analyzing a .LNK (shortcut) file recently received as an email attachment and blocked by email security as suspicious. What is the next step an engineer should take?
A. Open the file in a sandbox environment for further behavioral analysis as the file contains a malicious script that runs on execution. B. Upload the file to a virus checking engine to compare with well-known viruses as the file is a virus disguised as a legitimate extension. C. Quarantine the file within the endpoint antivirus solution as the file is a ransomware which will encrypt the documents of a victim. D. Delete the suspicious email with the attachment as the file is a shortcut extension and does not represent any threat.