Hunter Lab

Instructions: Uncompress the lab (pass: cyberdefenders.org), examine the image, and answer the provided questions. Case Overview: The SOC team got an alert regarding some illegal port scanning activity coming from an employee's system. The employee was not authorized to do any port scanning or any offensive hacking activity within the network. The employee claimed that he had no idea about that, and it is probably a malware acting on his behalf. The IR team managed to respond immediately and take a full forensic image of the user's system to perform some investigations. There is a theory that the user intentionally...