TryHackMe - Practice Analysis (Cyber Kill Chain) | SOC Analyst 1

 

We really hope you enjoyed this room. In order to strengthen your knowledge, let's do a practice analysis. 

Here is the real-world scenario for you to tackle:

The infamous Target cyber-attack, which led to one of the largest data breaches in history took place on November 27, 2013.

On December 19th, 2013, Target released a statement confirming the breach, stating that approximately 40 million credit and debit card accounts were impacted between Nov. 27 and Dec. 15, 2013. Target had to pay the fine of $18.5 million under the terms of the multistate settlement agreement. This is considered to be the largest data-breach settlement in history.


How did the data breach happen? Deploy the static site attached to this task and apply your skills to build the Cyber Kill Chain of this scenario. Here are some tips to help you complete the practical:

1. Add each item on the list in the correct Kill Chain entry-form on the Static Site Lab:

  • exploit public-facing application
  • data from local system
  • powershell
  • dynamic linker hijacking
  • spearphishing attachment
  • fallback channels

2. Use the ‘Check answers’ button to verify whether the answers are correct (where wrong answers will be underlined in red).

Answer the question below
What is the flag after you complete the static site? THM{7HR347_1N73L_12_4w35om3}. Using the site that was provided by TryHackme, we'll add each item listed above to the correct Kill Chain to get the flag. 

Comments