Training Mission: Apache Shutdown Copy

Targeting a known public web server, this scenario emulates an attack on an Apache web server where the attacker uses a Secure Shell (SSH) brute-force attack to gain access to the system. Participants are confronted with a disruption to critical business components and must act swiftly in order to maintain up-time and to mitigate the attack. Participants will learn to detect the attack through the analysis of apache log files, linux system commands and forensics as well as understanding the basics of the attack chain including housekeeping and persistence.