← Labs
NetworkMediumPro
Quiet Queries
Company: Shipager Clinic
40 min7 questions100 pointsMITRE ATT&CK:T1071.004T1041
Briefing
Shipager Clinic is a private medical centre. The resolver administrator complained that load grew several-fold in one evening although nobody was in the office. The query export was handed to you.
What matters here is not the content of the names but their statistics. An ordinary workstation asks for a dozen familiar names an evening: mail, updates, the portal. Hundreds of different names inside one domain from a single machine is not a person.
The set contains both ordinary and suspicious queries. Separating them is part of the task.
This lab is part of the subscription
Get Pro to unlock every lab, the tracks and new material each month.
See pricing