Who Goes There

Web

Desktop Recommended

This SPL/SIEM challenge is optimized for desktop computers. For the best experience with complex queries and data analysis, we recommend using a larger screen.

Estimated Time

30

Difficulty

Medium

Point Value

10

Query Languages

SPL

Challenge Description

A strange User-Agent string keeps popping up in web server logs. What's it up to? See if you can find out what's going on by digging deeper - are you already compromised?

Log Source Types

Apache Logs

MITRE ATT&CK Techniques

T1595 - Active Scanning
T1592 - Gather Victim Host Information
T1590 - Gather Victim Network Information
T1110.003 - Brute Force: Password Spraying

Getting Started

1

Sign in or create an account to begin the challenge

2

Review the challenge description and log types

3

Click "Start Challenge" to begin your investigation

Ready to start the challenge?

Head to the workspace to begin solving