EscapeRoom Lab

Instructions: Uncompress the lab (pass: cyberdefenders.org) and use your analysis tools to examine provided PCAPs and log files. Scenario: You as a soc analyst belong to a company specializing in hosting web applications through KVM-based Virtual Machines. Over the weekend, one VM went down, and the site administrators fear this might be the result of malicious activity. They extracted a few logs from the environment in hopes that you might be able to determine what happened. This challenge is a combination of several entry to intermediate-level tasks of increasing difficulty focusing on authentication, information hiding, and cryptography. Participants will benefit...