Intro to Log Analysis

Walkthrough summary

Intro to Log Analysis TryHackMe walkthrough with 18 answered prompts and lab methodology notes.

Sample prompts covered

• What's the term for a consolidated chronological view of logged events from diverse sources, often used in log analysis and digital forensics?
  Open the walkthrough page to inspect the full answer and command flow.
• Which threat intelligence indicator would 5b31f93c09ad1d065c0491b764d04933 and 763f8bdbc98d105a8e82f36157e98bbe be classified as?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the default file path to view logs regarding HTTP requests on an Nginx server?
  Open the walkthrough page to inspect the full answer and command flow.
• A log entry containing %2E%2E%2F%2E%2E%2Fproc%2Fself%2Fenviron was identified. What kind of attack might this infer?
  Open the walkthrough page to inspect the full answer and command flow.
• A log file is processed by a tool which returns an output. What form of analysis is this?
  Open the walkthrough page to inspect the full answer and command flow.