TRICK OR THREAT 2024 Walkthrough: PikaBoo | Incident Response

Описание: Welcome to Halloween BTLO Replay, a spine-chilling video series guiding you through retired BTLO labs from our Trick or Threat event. Join us… if you dare!

This week’s investigation is PikaBoo, a medium incident response lab.

Difficulty: Medium

The PikaBoo scenario:

ToT, a company, was developing a top-secret cloud project. Their lead developer, Will (who always uses GitHib), went on Halloween vacation but received feedback on his website, where he'd added his email for feedback. Needing someone to check his inbox, he sent his credentials to a colleague, Michelle. A few hours later, the entire cloud environment vanished. Will's in hot water for sharing his credentials-never share yours! Can you uncover how the environment got AWSaultAD?

0:00 – Introduction
1:16 – Question 1
1:59 – Question 2
4:16 – Question 3
5:50 – Question 4
7:25 – Question 5
7:56 – Question 6
10:33 – Question 7
12:40 – Question 8
15:10 – Question 9
17:33 – Question 10
19:08 – Question 11
20:41 – Question 12
22:44 – Question 13
23:09 – Question 14
25:10 – Question 15
25:33 – Question 16
27:52 – Summary

--
Powered by global blue team training provider, Security Blue Team, BTLO is a gamified platform for defenders to sharpen their skills during engaging security investigation and challenge scenarios.

The BTLO Replay series takes viewers through walkthroughs of retired labs. Visit the BTLO website to take on these challenges for yourself and discover new labs launching regularly.

SUBSCRIBE:    / @secblueteam  
WEBSITE: https://blueteamlabs.online
DISCORD:   / discord  
TWITTER:   / bluelabsonline  
LINKEDIN:   / blue-team-labs-online