ForensicsEasy

Corporate Network Breach Investigation

wiresharkpcapdns

UNG Cybersecurity Faculty

1/15/2025

150 points

Challenge Files

Challenge Instructions

README.txt

💡 Tip: Additional challenge-specific files are located in the assets folder. Check the instructions file for details.

Challenge Overview

Analyze captured network traffic from a corporate breach. DNS exfiltration was used to steal data. Your mission is to identify the command and control communication patterns and extract the flag from the network artifacts.

Learning Objectives

Apply forensics analysis techniques
Use professional security tools
Understand real-world attack scenarios
Document findings professionally

Tools You May Need

Wireshark or tshark for packet analysis
CyberChef for decoding
Network protocol references

Getting Started

Review the challenge description carefully
Gather and examine all provided materials
Apply systematic analysis methodology
Document your findings as you progress
Submit the flag when discovered

Flag Format

All flags follow the format: ung{descriptive_text}

Good luck!

Hints

💡 Hint 1 (Click to reveal)

Start by examining the basic artifacts and evidence provided

💡 Hint 2 (Click to reveal)

Use industry-standard tools for this type of analysis

💡 Hint 3 (Click to reveal)

The flag follows the format ung{...} with descriptive text