Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Room Icon

Boogeyman 3

Premium room

The Boogeyman emerges from the darkness again.

medium

60 min

17,946

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Due to the previous attacks of Boogeyman, Quick Logistics LLC hired a managed security service provider to handle its Security Operations Center. Little did they know, the Boogeyman was still lurking and waiting for the right moment to return. 

Prerequisites

This room may require the combined knowledge gained from the  L1 Path. We recommend going through the following rooms before attempting this challenge.

Investigation Platform

In this room, you will be tasked to analyse the new tactics, techniques, and procedures (TTPs) of the threat group named Boogeyman. Before we proceed, deploy the attached machine by clicking the Start Lab Machine button below. The provided lab machine runs an Elastic Stack, which contains the logs that will be used throughout the room. You can access it directly from your web browser.

  • Username: elastic
  • Password: elastic

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Lab Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Lab machine
Status:Off
Answer the questions below

Let's end this Boogeyman incident!