Opening book details…
Can I read Malware Exploit Investigation Lab on EtoBox?
Malware Exploit Investigation Lab by Євгенія Бедь is a document available to read on EtoBox.
What is Malware Exploit Investigation Lab about?
This lab involves investigating a malware exploit using Kibana, Sguil, and Wireshark in Security Onion. In part 1, the student uses Kibana to identify details of the first detected alert including time, source/destination IP/port, and classification. The student examines Snort rules and identifies malware family and severity. Part 2 has the student use Sguil to check alerts and gather more information. Part 3 will use Wireshark to investigate an attack, and part 4 will examine exploit artifacts.
- Author
- Євгенія Бедь
- Language
- EN