SOC Analyst Test - Animesh Khanna - Passed 92%

Welcome Animesh!

Before you start:

• Make sure you have a good internet connection.
• Make sure you have an SSH and RDP client installed on your computer.
• Retrieve your test server connection details using this one-time link: https://1ty.me/zcpU45rE 

Linux task 1:

Linux task 2:

1. Get a list of failed login attempts for the past month.
2. Paste the list in the text box below.

Linux task 3:

1. Create a user with username soctoo and give the user sudo permissions.
2. Upload a screenshot that shows the information of the created user including it's security groups.

Linux task 4:

1. Create a new group named socgroup and add the user soctoo to that group.
2. Upload a screenshot that shows the information of the user including it's security groups.

Linux task 5:

1. Allow access to the folder and the files inside the folder /home/soc_team, only to users in the group socgroup.
2. Upload a screenshot that shows the folder permissions for the /home/soc_team folder and file permissions for the the file within.

Linux task 6:

1. Get the username of all users that have read only permission on the folder /home/ioc.
2. Paste the usernames in the text box below.

Linux task 7:

1. Get a list of IPs currently connected to the server along with the ports they are connected on.
2. Paste the list in the text box below.

(bonus) Linux task 8:

1. Change the required password length to 14 characters.
2. Upload a screenshot that shows the changes you made.

50% completed

Windows task 1:

Windows task 2:

1. Export a list of failed login attempts for the past month as CSV.
2. Upload the CSV file using the box below.

Windows task 3:

1. Block remote access to the registry.
2. Upload a screenshot that shows the changes you made.

Windows task 4:

1. Restrict access to the registry only to the Administrator and SOC users.
2. Upload a screenshot that shows the changes you made.

Windows task 5:

1. Disable all other TLS protocols for both server and client connections.
2. Upload a screenshot that shows the changes you made.

Windows task 6:

• Triple DES 168
• AES 128/128
• AES 256/256

1. Disable all other ciphers on the server.
2. Upload a screenshot that shows the changes you made.