2024-07-30 - TRAFFIC ANALYSIS EXERCISE: YOU DIRTY RAT!

ASSOCIATED FILES:

NOTES:

 


Shown above:  Security analysts when they find malware in their network environment.

 

SCENARIO

LAN segment data:

 

TASK

  • Executive Summary: State in simple, direct terms what happened (when, who, what).
  • Victim Details: Details of the victim (hostname, IP address, MAC address, Windows user account name).
  • Indicators of Compromise (IOCs): IP addresses, domains and URLs associated with the activity.  SHA256 hashes if any malware binaries can be extracted from the pcap.

 

ANSWERS

 

Click here to return to the main page.