Brim

Walkthrough summary

Brim TryHackMe walkthrough with 13 answered prompts and lab methodology notes.

Sample prompts covered

• Process the "sample.pcap" file and look at the details of the first DNS log that appear on the dashboard. What is the "qclass_name"?
  Open the walkthrough page to inspect the full answer and command flow.
• Look at the details of the first NTP log that appear on the dashboard. What is the "duration" value?
  Open the walkthrough page to inspect the full answer and command flow.
• Look at the details of the STATS packet log that is visible on the dashboard. What is the "reassem_tcp_size"?
  Open the walkthrough page to inspect the full answer and command flow.
• Investigate the files. What is the name of the detected GIF file?
  Open the walkthrough page to inspect the full answer and command flow.
• Investigate the conn logfile. What is the number of the identified city names?
  Open the walkthrough page to inspect the full answer and command flow.