Splunk 3
Premium roomPart of the Blue Primer series. This room is based on version 3 of the Boss of the SOC (BOTS) competition by Splunk.
medium
To access material, start machines and answer questions login.
Set up your virtual environment
This is the 4th room in this series. This room is based on 's Boss of the competition, the third dataset (opens in new tab).
You can read more about this dataset here (opens in new tab).
It is highly recommended that you complete the 101 and the BOTSv2 rooms before attempting this room.
This room is designed with the assumption that you know the basics of and are comfortable querying various data sources.
Room Machine
Before moving forward, deploy the lab machine.
From the AttackBox, open Firefox and navigate to the instance (http://MACHINE_IP:8000).
You may need to refresh the page until loads. This can take up to five minutes to launch.
Ready to learn Cyber Security?
The Splunk 3 room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in