BTLO Replay: DOCTOR | Incident Response Lab Walkthrough

Описание: Welcome to BTLO Replay, a video series that will take you through retired BTLO labs. Videos posted every Friday at 6pm BST.

This week’s lab is DOCTOR, a web application log analysis investigation.

Difficulty: Easy

The DOCTOR scenario:

One of our web application servers has been compromised and the incident response team has isolated the machine. You’ve been provided with remote access; investigate the system and figure out the attacker’s actions.

0:00 – Introduction
0:55 – Lab scenario and tools
1:54 – Overview of questions
2:23 – Question 1
4:34 – Question 2
5:43 – Question 3
8:16 – Question 4
9:42 – Question 5
12:15 – Question 6
13:24 – Question 7
14:49 – Question 8
15:35 – Summary
15:55 – Outro

--

Powered by global blue team training provider, Security Blue Team, BTLO is a gamified platform for defenders to sharpen their skills during engaging security investigation and challenge scenarios.

The BTLO Replay series takes viewers through walkthroughs of retired labs. Visit the BTLO website to take on these challenges for yourself and discover new labs launching regularly.

SUBSCRIBE:    / @blueteamlabsonline  
WEBSITE: https://blueteamlabs.online
DISCORD:   / discord  
TWITTER:   / bluelabsonline  
LINKEDIN:   / blue-team-labs-online