Recent DiscussionsMost RecentNo Solutions YetSolutionsNo Replies YetAdvanced CTF Challenge: Inner Maze Hi, I have gone through the tunnel of the inner maze and found myself in the Jail. I feel like I have a pretty good jail escape, but I get a isinstance is not defined. Can I get some help? SolvedMalicious Document Analysis: Dropper Analysis I need help with this lab. going through the Malicious document analysis section of the Incident response badge. it goes from "use olevba" to analyse documents to wanting you to edit python script to...Healthcare Compliance I keep getting an in correct response when answering a question on the Healthcare Compliance Lab. The HIPAA Framework. Question is Your hospital hires an IT consultant to audit your network securi...Microsoft Sentinel SOAR: Demonstrate Your Skills I am currently working on the Microsoft Sentinel SOAR lab, which involves the use of logic app for automation. From task 4 of the lab, which requires me to do the below and the lab will automatically...Microsoft Sentinel SOAR: Demonstrate Your Skills Question 11 I have finished all my other Task and the last task doesn't want to unlock. I have been waiting over 30 minutes or more now. Can anymore guide me on what to do. Please Help. Thanks APT29 Threat Hunting with Splunk: Demonstrate Your Skills - Question 10 In relation towards the question : A PowerShell script was initially executed to extract encoded data from an image file. What is the full ParentCommandLine field value used to execute this? I am p...SolvedThreat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7 In relation to What is the device that tcpdump is dumping packets from? For some reason win-host-1.asgard.corp and win-host-1 does not work and NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038}...SolvedEthereum: The Blockchain, Transactions, and Explorers Hi All, I am super stuck on question 9' After completing the previous question, a certain number of ETH was sent to your wallet. Using the blockchain explorer, what is the address that sent you this...Microsoft Sentinel SOAR: Demonstrate Your Skills I have tried to complete the Microsoft Sentinel SOAR lab. I saw the following information, which is limiting my access. I am unable to complete any task that involves role assignment. I was able to c...Cannot seem to connect to Snaplabs via VPN Hello, I’ve spun up a Snaplabs range - it’s a templated range based on shirts. I seem to be having trouble connecting to it though: I’ve added a VPN and tried to connect to it from several endpoin...SolvedThreat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3 For the question There is a .bat file that is executed on the victim machine. What is the file path of the .bat file?, for some reason I cant pick up any strings in general with that pattern. I am ...Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9 In relation to the What named local variable holds the IP address from the for loop? I have been checking out the local varaibles but as per the for loop none of the variables typed in w...SolvedAPT43: Malware Analysis - Question 8 In relation to the type of files are they once extracted? After extracting the files, I was basically trying multiple file extensions, from XML type files, to VBA as per the briefing. I am wo...Threat Actors: APT43 - Question 7 In relation to What Resource Development technique was used to facilitate the hosting of beacons, implants, and file exfiltrators? For some reason Obtain Capabilities is wrong, and I trie...SolvedAPT34: PoisonFrog - Question 6 For the What is the name of the file that executes the HTTP and DNS handling scripts?, I am confused on where I should be digging deeper as the powershell script was showcased to be wrong in terms ...SolvedAPT34: Glimpse - Question 4 For What is the name of the Visual Basics script that is used to run the malicious PowerShell script?, I am wondering about where should I dig deeper into volatility into extracting the command his...SolvedHafnium: ProxyLogon (Offensive) - Question 3 For the FQDN, I am wondering about where I am going wrong as I am basically using the command expected of this lab. However, there wasn't any shell code provided nor any expecations of wha...SolvedHafnium: ProxyLogon (Offensive) - Question 3 For the FQDN, I am wondering about where I am going wrong as I am basically using the command expected of this lab. However, there wasn't any shell code provided nor any expecations of wha...SolvedApache Header Tampering Can someone point me to the right track? On this one, I found the hidden directory, used an X-Forwarded-For: to see into that directory where scanning for files showed a lot of 404s, with just a few ...SolvedRansomware: Darkside - Question 9 In terms of determining the name of the service that is installed after the ransomware was executed, there doesn't seem to be any service installation activities observed from the endpoint. Wonde...Solved
Tagshelp & support250immersive labs147defensive cyber90offensive cyber64challenges60questions & feedback50cloud security48application security46other21immersive labs application security16