Retired Blue Team Lab Walkthrough | Signal | Reverse Engineering

Описание: Welcome to BTLO Replay, a video series that will take you through retired BTLO labs. Videos are posted every Friday at 6pm BST (UTC+1).

This week’s investigation is Signal, a medium reverse engineering lab.

Difficulty: Medium

The Signal scenario:

An employee at Gutkowski PLC had permission from the IT team to install Signal messaging application on his desktop. But when he tried to run the installer the application throws an error message. He is sending the executable to the SOC for inspection.

Let's find the answers!

0:00 – Introduction
1:45 – Question 1
4:15 – Question 2
7:01 – Question 3
7:51 – Question 4
11:26 – Question 5
13:35 – Question 6
21:50 – Question 7
24:13 – Question 8
26:14 – Question 9
27:20 – Question 10
30:08 – Question 11
31:15 – Question 12
31:44 – Question 13
32:36 – Question 14
33:31 – Question 15
34:46 – Question 16
36:03 – Summary

--
Powered by global blue team training provider, Security Blue Team, BTLO is a gamified platform for defenders to sharpen their skills during engaging security investigation and challenge scenarios.

The BTLO Replay series takes viewers through walkthroughs of retired labs. Visit the BTLO website to take on these challenges for yourself and discover new labs launching regularly.

SUBSCRIBE:    / @secblueteam  
WEBSITE: https://blueteamlabs.online
DISCORD:   / discord  
TWITTER:   / bluelabsonline  
LINKEDIN:   / blue-team-labs-online