JetBrains

JetBrains is a blue team lab that falls under the Network Forensics category and will cover the following subjects: Wireshark, Brim, NetworkMiner, Initial Access, Execution, Command and Control.

Learning Objectives

Analyze network traffic using Wireshark to identify web server exploitation, extract attacker IOCs and persistence mechanisms, and map attack techniques to MITRE ATT&CK.

Categories: Network Forensics.

MITRE ATT&CK Tactics: Initial Access, Execution, Command and Control.

Tools: Wireshark, NetworkMiner, Brim.

Difficulty: easy.