Packet Analysis of an Intrusion using Brim & Network Miner

CTF Writeups

This is a simple walkthrough of the Warzone2 room on Tryhackme. It involves triaging an alert using a PCAP file that was captured to determine if it is a false or true positive. We will be using the tools: Brim, Network Miner and Wireshark, if needed.

Photo by Philipp Katzenberger on Unsplash

TryHackMe | Warzone 2

Scenario

You work as a Tier 1 Security Analyst L1 for a Managed Security Service Provider (MSSP). Again, you’re tasked with monitoring …

analysis blue team brim ctf cybersecurity intrusion miner network packet tryhackme tryhackme-walkthrough