Cybersecurity Investigation Techniques

In this final lab of the Security Plus 701 series, Toby from Oine Security guides viewers through a challenge lab focused on network traffic analysis and threat mitigation. Using tools like Wireshark and Security Onion, the tutorial demonstrates how to identify and analyze suspicious network activity, such as unauthorized data transmission and account creation. The video emphasizes the importance of thorough investigation, note-taking, and repeated practice to master cybersecurity skills. It concludes with a call to action for viewers to engage with Oine Security's courses for further learning and professional development.

Why is it important to take notes and revisit the video content multiple times?

• To become proficient with the tools and skills

• To avoid watching the video again

• To impress the instructor

• To memorize the content

What tool is used to open the traffic file in the investigation?

• Task Manager

• Wireshark

• Event Viewer

• Security Onion

Which command is used to display the active connections and ports on Windows Server?

• netstat

• ping

• ipconfig

• tasklist

What anomaly was found in the Windows Server during the investigation?

• A disabled service

• An unauthorized user account

• A missing file

• A corrupted registry

Which tool is used to examine Windows Server security logs?

• Event Viewer

• Wireshark

• Task Manager

• Security Onion

What type of data was identified as being exfiltrated in the TCP stream?

• Financial data

• Personal Identifiable Information (PII)

• Health records

• Credit card information

What action is recommended to mitigate unauthorized accounts?

• Ignore the account

• Disable the account

• Delete the account

• Rename the account

Which command can be used to verify if a malicious application is still running?

• ping

• net user

• get-process

• ipconfig

What is a suggested method to prevent reestablishment of a malicious connection?

• Restart the computer

• Block the IP address at the firewall

• Disable the network adapter

• Change the network password

What is the primary focus of the Security Fundamentals Academy mentioned in the video?

• Network configuration

• Software development

• Basic security skills for beginners

• Advanced hacking techniques