Network Forensics
Difficulty: easy
Log Format: syslog
Port Scan Sweep
Firewall lit up like a Christmas tree. One IP hit 20 different ports in 7 seconds. They weren't guessing — they were mapping. Two ports answered back.
Port ScanReconnaissanceFirewall Logs
Investigation Scenario
Firewall lit up like a Christmas tree. One IP hit 20 different ports in 7 seconds. They weren't guessing — they were mapping. Two ports answered back.