Forum Discussion

RobN's avatar
RobN
Icon for Bronze III rankBronze III
14 days ago
Solved

Malware Analysis: Tracking a LOLBins Campaign – Acquisition

Has anybody managed to get a token for the snort question on this lab? I've created a rule that searches for one of the GET requests given in the pcap file but snort isn't finding anything.

defensive cyber
  • RobN's avatar
    RobN
    10 days ago

    Hi Tilly,

    Thanks for the info - I completed this lab at the weekend. I'd been using the return key in my snort rules file and the lab wasn't parsing it correctly. I created the snort rule on one complete line and it created the token.txt file immediately.

    • RobN's avatar
      RobN
      Icon for Bronze III rankBronze III
      10 days ago

      Hi Tilly,

      Thanks for the info - I completed this lab at the weekend. I'd been using the return key in my snort rules file and the lab wasn't parsing it correctly. I created the snort rule on one complete line and it created the token.txt file immediately.

      • TillyCorless's avatar
        TillyCorless
        Icon for Community Manager rankCommunity Manager
        10 days ago

        Persistence is the 🔑
        Glad you managed to complete it. Your insights will be useful to other community members!