BR8 - Network Traffic Analysis

You are provided with a list of objectives for this Battle Room. In order to perform some of these tasks, there are some pieces of information you will need.

1. The user1 password is P@ssedU1
2. The user1 user has sudo permissions to get to tasks requiring elevated privileges. You will need the user1 password to execute sudo.
3. All questions require that you submit your answers using the Q&A Portal. The Q&A Portal can ca accessed through a desktop shortcut named README.
4. The answers to all questions can be found in the PCAP file on the Kali desktop called pcap.

The following list of IPs will be used to answer question 28. Known bad adversary IPs:

41.10.123.231

40.15.47.108

41.10.211.87

41.8.147.168

37.123.200.234

37.11.220.234

37.123.201.104

67.128.87.54

41.8.147.169

67.125.103.65

Rules of Engagement:

• The 10.x.x.x network is off limits. This is where all of the umpire and scoring functions happen. If this gets altered, your score may not be registered.
• The logging services (syslog, EventViewer, nxlog) on the systems are off limits. These are also related to the umpire and scoring.