Going beyond root on beginner forensics challenges by 0xdf | Cyber Apocalypse 2024 workshops
Source: YouTube · Hack The Box · published Mar 8, 2024 · 23:43
This workshop covers three beginner-friendly forensics challenges from the Cyber Apocalypse CTF, demonstrating real-world security analysis techniques 0:00.
Key Takeaways:
• Alien Cradle challenge involves analyzing a targeted PowerShell script that checks for specific users and downloads malicious code, demonstrating how attackers create persistent access 3:30.
• Extraterrestrial Persistence challenge examines a bash script that establishes persistence on Linux systems by creating services, showing how attackers maintain access after initial compromise 6:35.
• Packet Cyclone challenge uses Chainsaw and Sigma rules to analyze logs and detect rclone usage, revealing how attackers leverage cloud services like Mega for data exfiltration 10:04.
These forensics challenges provide practical insights into detecting, analyzing, and understanding malicious activities that mirror real attack scenarios 23:33.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hey this is xdf in this Workshop we're going to be doing three of the more beginner friendly forensics challenges from last year's cyber apocalypse CTF um we're also going to do a little bit of digging in kind of going Beyond route beyond the flags actually understanding The Challenge uh the challenges and what they present and how they mimic real life so even if you're not a beginner hopefully this will be useful for you you might learn something um with that in mind let's go ahead and jump in we're going to start with alien cradle um so last year's CTF had a story where there's aliens coming to try to find some Relic and I don't remember exactly the details but Pandora is our uh hero and so um if we kind of skip ahead here we can see uh they found in Powershell logs they found a Powershe…