StormWind Cyber Range CTF - Capstone 1 - Level 2: Event 1

Welcome to the Cyber Range Event: CTF - Capstone - Level 2: Event 1. This is a Level 2 capstone event, meaning you will be challenged more than the level 1 events. If you haven’t done the Level 1 events and are unfamiliar with the tools discussed below, it is encouraged that you complete all the Level 1 events.
This event centers around Blue Team (defensive) IT tasks appropriate for most environments. Within this cyber range there are a series of security-related issues. Your task is to expose weaknesses, exposures and attacks currently underway. You have the means of revealing flags with the following tools:

• WireShark (Packet Analysis)
• Nmap (IP/Port Scanning)
• OpenVAS (CVE Scanning)
• Splunk (SIEM)
• Snort (IDS/IPS)

Using these tools, you will solve flags for this event. By solving this challenge, you will earn a badge for this exercise. Seek a badge of “Victory” or better signal successful achievement of the event’s activities. Should you find this too challenging, we recommend checking out the Level 1 events that will build the skills needed for this event.