Definition
Evasion refers to the deliberate actions taken to avoid detection or capture by security systems or personnel. This involves understanding how security controls function and then employing techniques to bypass or circumvent them. On the job, evasion is critical for both offensive security professionals testing defenses and defensive teams seeking to anticipate attacker tactics. For instance, an attacker might use obfuscation to hide malicious code from antivirus software. A common misconception is that evasion is solely about breaking into systems, but it also encompasses staying undetected after initial access. This concept is frequently tested in domains related to cybersecurity, such as CompTIA Security+ and CySA+.