Loading page
Review the challenge brief, files, and requirements.
You've extracted these IOCs from a new malware sample and need to prioritize threat intel sharing. Your SIEM shows:
IOC | Hits in last 30 days | Notes
-----------------------------|----------------------|------------------
evil-c2.com | 0 | Registered yesterday
185.143.223.47 | 847 | AWS IP, rotates daily
svchost32.exe (in System32) | 0 | Unusual binary name
Mozilla/5.0 (Botnet v2.1) | 12 | Custom User-Agent
Which IOC provides the HIGHEST value for proactive defense and sharing with other organizations?
Sign in to attempt this challenge.
Use Proving Grounds to continue your challenge practice.
Open Proving Grounds