Exfil Over DNS

Our EDR flagged strange DNS from a workstation and grabbed a capture. Something is sneaking data out over the one protocol nobody blocks. Follow the queries and rebuild what left the network.

Difficulty

Medium

Estimated time

25 min

Points

275 pts

Completions

Be the first to complete it

Authors

By Cyber Academy 4 U