ricardo214

10th place

Hint 22

hints

Hint for 6 - Get with the Process

-10

Challenge	Category	Value	Time
5 - The Sorting Hat	5 - Investigation - Alert Triage	50
4 - Groups are fun	5 - Investigation - Alert Triage	50
3 - The Internet can be a scary place	5 - Investigation - Alert Triage	50
2 - Shodan	5 - Investigation - Alert Triage	50
1 - Who is noisy?	5 - Investigation - Alert Triage	50
3 - New User 3	4 - User Activity	50
2 - New User 2	4 - User Activity	50
1 - New User 1	4 - User Activity	50
9 - SSH connections	3 - Exploring the Network	50
8 - Which endpoint went to that IP?	3 - Exploring the Network	50
7 - Indicator Match User!	3 - Exploring the Network	50
6 - Indicator Match!	3 - Exploring the Network	50
5 - Event Clearing 2 - MITRE T1562.002	3 - Exploring the Network	50
4 - Event Clearing 1 - MITRE T1562.002	3 - Exploring the Network	50
3 - Total Queries live.com	3 - Exploring the Network	50
2 - JA3 compression tools DEEP	3 - Exploring the Network	50
1 - JA3 for compression tools	3 - Exploring the Network	25
7 - Severe Situation	2 - SIEM Overview	50
6 - Which one?	2 - SIEM Overview	50
5 - TTP	2 - SIEM Overview	50
4 - Alert! Alert!	2 - SIEM Overview	25
3 - Threat Intel Sources	2 - SIEM Overview	25
2 - Expansion is Key	2 - SIEM Overview	25
1 - SIEMple	2 - SIEM Overview	25
4 - Room of Requirement	1 - Elastic Security Components	25
3 - QueryOS	1 - Elastic Security Components	25
2 - Native Protection	1 - Elastic Security Components	20
1 - CIA	1 - Elastic Security Components	20