My Journey in Cybersecurity Labs: Securing Systems and Writing the Playbook
Technical & Creative Writer | Cybersecurity Analyst | Linux & Network Security I am a technical communicator moving into the cybersecurity field, where I will focus on Linux administration and other foundational concepts. Because I have a background in mass communication and journalism, I can break down complicated security holes into clear, useful documentation. Right now, I'm writing about my hands-on experience with OverTheWire and different security labs to improve my technical skills and way of working. I think that security is only as strong as how well we can understand and talk about it.
Markdown supported · ⌘↵ to post
Furqan Ashraf
Nice hunt. One step I'd add once you find the C2 IP: check it against a known C2 list. A confirmed match tells you whether it's commodity malware with documented behavior or something targeted, and that changes how deep the remediation needs to go.
Disclosure: I work on WhoisFreaks; our Threat Intelligence Feed includes a daily C2 IP list for exactly that lookup: whoisfreaks.com/products/threat-intelligence-feed