BTLO Replay: MINER | Incident Response Lab Walkthrough

Описание: Welcome to BTLO Replay, a video series that will take you through retired BTLO labs. Videos posted every Friday at 6pm BST.

This week’s investigation is MINER, an incident response lab that utilizes NetworkMiner.

Difficulty: Easy

The MINER scenario:

Our detection team reported that they received an IDS alert related to reconnaissance, but they were unable to read the traffic as it was encrypted.

0:00 – Scenario and introduction
2:01 – Tools
2:33 – Investigation files
2:46 – Question 1
5:57 – Question 2
6:34 – Question 3
10:21 – Question 4
17:29 – Question 5
19:05 – Summary

--

Powered by global blue team training provider, Security Blue Team, BTLO is a gamified platform for defenders to sharpen their skills during engaging security investigation and challenge scenarios.

The BTLO Replay series takes viewers through walkthroughs of retired labs. Visit the BTLO website to take on these challenges for yourself and discover new labs launching regularly.

SUBSCRIBE:    / @blueteamlabsonline  
WEBSITE: https://blueteamlabs.online
DISCORD:   / discord  
TWITTER:   / bluelabsonline  
LINKEDIN:   / blue-team-labs-online