Forum Discussion

RobN's avatar
RobN
Icon for Bronze III rankBronze III
15 days ago
Solved

Malware Analysis: Tracking a LOLBins Campaign – Acquisition

Has anybody managed to get a token for the snort question on this lab? I've created a rule that searches for one of the GET requests given in the pcap file but snort isn't finding anything.
defensive cyber
  • RobN's avatar
    RobN
    11 days ago

    Hi Tilly,

    Thanks for the info - I completed this lab at the weekend. I'd been using the return key in my snort rules file and the lab wasn't parsing it correctly. I created the snort rule on one complete line and it created the token.txt file immediately.

RobN's avatar
RobN
Icon for Bronze III rankBronze III
11 days ago

Hi Tilly,

Thanks for the info - I completed this lab at the weekend. I'd been using the return key in my snort rules file and the lab wasn't parsing it correctly. I created the snort rule on one complete line and it created the token.txt file immediately.

TillyCorless's avatar
TillyCorless
Icon for Community Manager rankCommunity Manager
11 days ago

Persistence is the 🔑
Glad you managed to complete it. Your insights will be useful to other community members!