Identify cyber attacks using elastic search and visualize with Kibana
Budget: $250 – $750 AUD
1. Identify cyberattacks in the dataset.
2. Analyse the identified cyberattacks.
o
Align the cyberattack phases with the Lockheed Martin Cyber Kill Chain and MITRE ATT&CK attack techniques.
Visualise the attack (create a graphic depicting the security events/incidents relating to the context of the scenario with evidence).
Describe what tools could have been used to mitigate the attack captured in the dataset and how.
Describe which countermeasures could have prevented the cyberattack captured in the dataset and explain how/why.
3. Write a running sheet about all these steps (above) detailing how you interacted with the dataset in ELK (Timestamp, Command/Action, Reasoning/Explanation, and Output/Results).
Word limit: 3,500 words (+/- 10%)
2. Analyse the identified cyberattacks.
o
Align the cyberattack phases with the Lockheed Martin Cyber Kill Chain and MITRE ATT&CK attack techniques.
Visualise the attack (create a graphic depicting the security events/incidents relating to the context of the scenario with evidence).
Describe what tools could have been used to mitigate the attack captured in the dataset and how.
Describe which countermeasures could have prevented the cyberattack captured in the dataset and explain how/why.
3. Write a running sheet about all these steps (above) detailing how you interacted with the dataset in ELK (Timestamp, Command/Action, Reasoning/Explanation, and Output/Results).
Word limit: 3,500 words (+/- 10%)