calebcoble202

3rd place

2210 points


Awards


Solves

Challenge Category Value Time
3 - How many events? 6 - Investigation - RDP 50
2 - Return to The Source 6 - Investigation - RDP 50
1 - The big picture 6 - Investigation - RDP 50
14 - Not cool [BONUS] 5 - Investigation - Alert Triage 150
13 - The Pagemaster [BONUS] 5 - Investigation - Alert Triage 120
12 - Ahead my dears! 5 - Investigation - Alert Triage 100
11 - Didn't your parents tell you not to argue? 5 - Investigation - Alert Triage 100
10 - So now what? 5 - Investigation - Alert Triage 75
9 - How original 5 - Investigation - Alert Triage 100
8 - The Mark of Success 5 - Investigation - Alert Triage 100
7 - Sort of a big deal 5 - Investigation - Alert Triage 75
6 - Get with the Process 5 - Investigation - Alert Triage 75
5 - The Sorting Hat 5 - Investigation - Alert Triage 50
4 - Groups are fun 5 - Investigation - Alert Triage 50
3 - The Internet can be a scary place 5 - Investigation - Alert Triage 50
2 - Shodan 5 - Investigation - Alert Triage 50
1 - Who is noisy? 5 - Investigation - Alert Triage 50
3 - New User 3 4 - User Activity 50
2 - New User 2 4 - User Activity 50
1 - New User 1 4 - User Activity 50
9 - SSH connections 3 - Exploring the Network 50
8 - Which endpoint went to that IP? 3 - Exploring the Network 50
7 - Indicator Match User! 3 - Exploring the Network 50
6 - Indicator Match! 3 - Exploring the Network 50
5 - Event Clearing 2 - MITRE T1562.002 3 - Exploring the Network 50
4 - Event Clearing 1 - MITRE T1562.002 3 - Exploring the Network 50
3 - Total Queries live.com 3 - Exploring the Network 50
2 - JA3 compression tools DEEP 3 - Exploring the Network 50
1 - JA3 for compression tools 3 - Exploring the Network 25
7 - Severe Situation 2 - SIEM Overview 50
6 - Which one? 2 - SIEM Overview 50
5 - TTP 2 - SIEM Overview 50
4 - Alert! Alert! 2 - SIEM Overview 25
3 - Threat Intel Sources 2 - SIEM Overview 25
2 - Expansion is Key 2 - SIEM Overview 25
1 - SIEMple 2 - SIEM Overview 25
4 - Room of Requirement 1 - Elastic Security Components 25
3 - QueryOS 1 - Elastic Security Components 25
2 - Native Protection 1 - Elastic Security Components 20
1 - CIA 1 - Elastic Security Components 20