Project Ares Battle Room 8 - Traffic Analysis

Overview

Battle Rooms are scenarios designed to help learners on a set of fundamental tasks specific to a topic. You can consider them foundational building blocks that all cyber security professionals must be proficient to participate in modern day offensive and defensive operations.

They are played individually and allow users to enter the environment and are provided a simple network environment, instructions and a list of tasks to complete.

Battle Room Activity

Players will be given a Kali box with multiple network analysis tools installed that is accessible through SSH or VNC terminals provided within the scenario. They will be required to conduct network forensics through analysis of a PCAP.

• Load Time - 5 min
• Time Limit - 12 hrs
• # of Tasks - 30
• Hints - Yes
• Save Session - Yes
• Team Based - No

Prerequisites

Learners should be familiar with basic intrusion detection and packet capture analysis.

Objectives

The learner must demonstrate the ability to analyse a file to answer questions related to origins of traffic, identification of credentials in the clear, sensitive document exfiltration and database activity.