THM Room: BOTSv2

Introduction

What?

Version 2 of the Boss of the SOC (BOTS) competition by Splunk.

Why?

Advanced hunting APTs with Splunk.

How?

• Data dive

• Web activity investigation

• Detecting SQL and XSS web application attacks

• USB attack investigation

• Investigating FTP