NorthLedger Financial Services has contacted your team after detecting suspicious outbound traffic from its corporate network. The SOC believes a user may have executed a malicious recruitment or vendor-portal file. You have been given a PCAP from the relevant network segment. Your task is to determine whether the organisation is compromised, identify the affected host, extract indicators and explain the likely attacker behaviour.
Haystack
| Schwierigkeitsgrad | |
| Punktzahl | |
| Tags | |
| Abschlüsse | |
| Autoren | |
| Bewertung |
Defensive
Entry Level
Aktivitäten
| Labor freigegeben | 2026-05-29 12:55:00 | |
 rayaseiren haben 1. Blut |
2026-06-02 18:14:12 | |
 noother haben 2. Blut |
2026-06-10 00:28:55 | |
 Fhyyto haben 3. Blut |
2026-06-11 19:30:42 | |
 R00ts3c haben 4. Blut |
2026-06-17 11:07:08 | |
|
Diddy haben 5. Blut |
2026-06-22 11:16:42 |
