TRICK OR THREAT 2024 Walkthrough: Typhon | Incident Response

Описание: Welcome to Halloween BTLO Replay, a spine-chilling video series guiding you through retired BTLO labs from our Trick or Threat event. Join us… if you dare!

This week’s investigation is PikaBoo, a medium incident response lab.

Difficulty: Medium

The PikaBoo scenario:

I made a terrible mistake. A few nights ago, I downloaded a program called NG-IA.exe from a sketchy forum. It was advertised as a 'Next-Gen AI tool' that could automate my tasks. But ever since I ran it, things have changed in ways I can't explain. One time, when I ran it, nothing seemed to happen-luckily, I managed to capture the network traffic during that attempt. Now, it reappears every time I think I've removed it like it knows exactly what I'm trying to do. If anyone knows how to stop this, please help me. I'm running out of options.

0:00 – Introduction
2:04 – Question 1
6:00 – Question 2
11:16 – Question 3
19:16 – Question 4
22:55 – Question 5
27:40 – Question 6
30:02 – Question 7
32:00 – Question 8
33:38 – Question 9
34:40 – Question 10
36:12 – Summary

--
Powered by global blue team training provider, Security Blue Team, BTLO is a gamified platform for defenders to sharpen their skills during engaging security investigation and challenge scenarios.

The BTLO Replay series takes viewers through walkthroughs of retired labs. Visit the BTLO website to take on these challenges for yourself and discover new labs launching regularly.

SUBSCRIBE:    / @secblueteam  
WEBSITE: https://blueteamlabs.online
DISCORD:   / discord  
TWITTER:   / bluelabsonline  
LINKEDIN:   / blue-team-labs-online