2020-11-13 - TRAFFIC ANALYSIS EXERCISE - QUIETHUB

ASSOCIATED FILES:

  • 2020-11-13-traffic-analysis-exercise.pcap   (9,071,924 bytes)
  • 2020-11-13-traffic-analysis-exercise-alerts.jpg   (3,246,604 bytes)
  • 2020-11-13-traffic-analysis-exercise-alerts.txt   (8,840 bytes)
  • Note: This contains malware/artifacts from the infected host's C:\ drive.
  • Listing the contents here would give away some of the answers.

NOTES:

 

 

SCENARIO

LAN segment data:

 

TASK

  • Executive Summary: State in simple, direct terms what happened (when, who, what).
  • Details: Details of the victim (hostname, IP address, MAC address, Windows user account name).
  • Indicators of Compromise (IOCs): SHA256 hashes and details of the malware and/or artifacts, IP addresses, domains and URLs associated with the infection.

 

ANSWERS

 

Click here to return to the main page.