Skip to content

Opening book details…

Can I read Malware Exploit Investigation Lab on EtoBox?

Malware Exploit Investigation Lab by Євгенія Бедь is a document available to read on EtoBox.

What is Malware Exploit Investigation Lab about?

This lab involves investigating a malware exploit using Kibana, Sguil, and Wireshark in Security Onion. In part 1, the student uses Kibana to identify details of the first detected alert including time, source/destination IP/port, and classification. The student examines Snort rules and identifies malware family and severity. Part 2 has the student use Sguil to check alerts and gather more information. Part 3 will use Wireshark to investigate an attack, and part 4 will examine exploit artifacts.

Author
Євгенія Бедь
Language
EN

More by Євгенія Бедь

Browse all works by Євгенія Бедь