Framework Category: Investigate

Specialty Area: Digital Forensics

Work Role: Cyber Defense Forensics Analyst

Task Description: Correlate incident data and perform cyber defense reporting. $($T$0400)$

Scenario

We recently fired our web admin about a week ago. Users are reporting extremely odd behavior on their workstations after visiting the new company intranet. I need you to investigate and report on this incident.

Additional Information

More details and objectives about this challenge will be introduced during the challenge meeting, which will start once you begin deploying the challenge.

You will be able to check your progress during this challenge using the check panel within the workspace once the challenge is deployed. The checks within the check panel report on the state of some or all of the required tasks within the challenge.

Once you have completed the requested tasks, you will need to document the methodology you used with as much detail and professionalism as necessary. This should be done on the documentation tab within the workspace once the challenge is deployed. Below the main documentation section be sure to include a tagged list of applications you used to complete the challenge.

Your username$/$password to access all virtual machines and services within the workspace will be the following...

Username: playerone

Password: password$123$

The username$/$password used to access the Firewall's web interface within the workspace will be the following...

Username: admin

Password: password$123$