- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Security
Incident Response and Threat Intelligence with Zeek
Master the fundamentals of network threat detection and incident response with Zeek's powerful analysis capabilities. You'll start by developing custom detection scripts to identify port scans, SQL injection attempts, and brute force attacks in captured network traffic. From there, you'll implement file extraction and hash-based malware detection to identify malicious executables transferred across the network. The lab culminates in deploying advanced correlation rules that detect multi-stage attacks and command-and-control communications. Throughout the exercises, you'll work with real network captures from a security incident at Globomantics, applying detection techniques essential for SOC analysts and incident responders.
Lab Info
Table of Contents
-
Challenge
Detect Suspicious Network Activity with Zeek Scripts
In this step, you’ll create and deploy Zeek scripts to identify suspicious patterns in network traffic. By the end, you’ll be able to write basic Zeek signatures to detect common attack patterns.
-
Challenge
File Analysis and Malware Detection
In this step, you'll configure Zeek to automatically extract all files transferred over the network, generate cryptographic hashes of these files, and compare them against known malware signatures. This challenge will teach you how to use Zeek for forensic file extraction and automated malware detection in network traffic.
-
Challenge
The Final Objective
Welcome to the final objective! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.