BTLO "Paranoid" Challenge Solution | Incidence Response Investigation using Linux Audit Logs скачать в хорошем качестве

BTLO "Paranoid" Challenge Solution | Incidence Response Investigation using Linux Audit Logs

In this video I have perform the detail investigation on an incident which is actually a challenge exercise created by Blue Teams Online Lab (BTLO) named as "Paranoid". This video will provide the solution to the challenge as well as try to share the knowledge on how to use Linux Audit Logs for performing investigation during a cyber incident. ****************************************************************************** 00:00 Intro & Discussion on provided Log file in the challenge. 05:40 Finding answers to first three questions of the challenge in Audit Log. 10:00 Answers to the first 3 questions of challenge. 11:00 Detailed investigation on the incident/Diving into the audit logs. 50:14 Answers to the remaining questions of challenge. 56:27 The one line command to solve the challenge. 01:00:16 Closing Comments. ******************************************************************************