Advent of Cyber - Day 2: Threat Hunting with Elastic SIEM!

[@daratolsam]

If you know you're going to start and finish the challenge, thumbs up 👍

[@Piratagorranegra]

I dont know, but I hope so.

[@PeterDondlinger]

this song is fire

[@abdelhadiech-chaibi2921]

yeah soo good

[@vasosvasileiadis7978]

The song is 🔥! Thanks Tyler for sharing your knowledge! Excellent tutor !

[@vcustis25]

I love the song !!!🎶 Thanks for the Walkthrough🎄

[@ghassenbarkache1676]

Tyler you are the best I can see that you want to share your knowledge and your ways with people who are willing to learn I appreciate that

[@anonsecbro]

soc-mas season is comprised of lots of plots.. the Tyler song slaps 🔥🔥

[@howieisboss]

Bruh, that intro is an absolute banger

[@DJMCodes]

I came for the walkthrough and stayed for the song. Love this! Definitely subbing!

[@Asorour1988]

This is really awesome, and your presentation style is great!

[@jerryp148]

Great video! FYI every attempt to ask Echo a question resulted in an answer of "For the next tasks, you'll need to tackle without me!". Not sure if anyone else ran into this as well.

[@TylerRamsbey]

I THINK Echo was only enabled for Day 1 and Day 2. Although you are working on Day 2, the next days are enabled which is preventing Echo from working. That's just my guess (I have the same issue now).

[@atharvavlogs1446]

Thank you. Enjoyed the challenge and the song a lot.

[@monsolympus7823]

You are a great teacher. Thanks.

[@DavidAlvesWeb]

Great walkthrough Tyler!

[@AnkurRjkYT]

The intro is oppp

[@NatesSchoolofTech]

Just finished the challenge, well done Tyler!

[@incredibleneymarjr8918]

Love this video and excited for upcoming tasks 🔥

[@CyberGuardNetwork]

Thanks Tyler!.

[@TureIMasterEquality]

Thanks for the walk-through, gonna get to that once I'm off work. ..

[@Dr4hcir]

Great walkthrough, thanks!

[@mohammedettayby]

Nice song you kill it man

[@bncyber6250]

Loved it tyler Thank you

[@levi-w2f]

love the video tyler❤❤❤❤

[@JeffThome]

Nice job Tyler!

[@drmalc0m]

gg for using a Christmas song in a minor key! 1k style points. Intro is SICK! 👍

[@PrajwalKunte]

really like you teaching bro🙂

[@AayanKhan-bd2qv]

love the song......killed it 🔥🔥❤‍🔥❤‍🔥

[@BDavisfromthe606]

Thank you bro. I enjoyed the song lol

[@blvckmidvs]

Yo the intro song is dope! 🥳

[@shjd3412]

😻 Day 2

[@zigaudi]

Let's go!

[@SRoeiS]

why is that song actually so fire damnnn

[@TylerRamsbey]

Because I'm a rapper who can hack, not the other way around 😁

[@oildiggerlwd]

Day 2 here we go

[@LionelTellem]

We need that on Spotify please

[@KumManish]

Papa shell is always rocks though❤

[@gersonbarrientos1580]

the song got me! lol

[@xfraylin7932]

GI GO BELL THANKYOU

[@sareer]

the intro is dope

[@mr.wednesday9173]

Yooo i expect a good intro like this for the rest of advent of cyber.

[@Th3-Noob-Audit0rs]

the song is lit... :)

[@Darius404]

Video start 3:10

[@Black_uchihaa]

#Day 2 completed!

[@arulkumaransendilvel6853]

song is nice 😊

[@hewhocanbenamed1919]

Yeah am stuck on bad gateway

[@FilmPeak]

I know you are red-team now but you are such a good blue team! please do as much blue team as you feel comfortable with.

[@Piratagorranegra]

I started the machine for an hour, but nothing happened. Then I used the link and opened the elastic on my browser. After an hour, my time ran out, and I was able to still use elastic a little bit slower, but I decided to close it because I was not sure if I was exposed or something. I didn't get to complete the answer, so I'm here hoping to complete this chapter.

[@sandorbokonyi9538]

Thank you for this helpful video. I cannot see the Echo button. What are the preconditions to have it? Thanks.

[@GroveATron]

The link to access Elastic is loading the MP3 converter website instead so I can't complete this task. When I try the link in the VM it just spins. Any idea what I could be doing wrong?

[@Piratagorranegra]

what's up with the rap jam. is not bad , is fun and creative. I like that beat :P

[@NateInYoState]

Osint is strong with this one. This video was filmed November 29th

[@dylan8389]

Thank you for this, one thing I don't really get is the hostname. Does the hostname refer to a single PC / instance? If so why target all of them instead of just ADM-01. And why, after successfully brute forcing does the source IP change? Is this because the powershell script was initiated from the ADM-01 machine after gaining access to it?

[@HellsingGhrey-ht2wg]

How exactly do we get to the Elastic room? Update: Nevermind...Just had to scroll down the left side of the screen and click on day 2...

[@KaungKhant-yz8nd]

Can someone explain me that .255.1 is Glitch Ip address and how about 10.0.11.11? Whose ip address is it?

[@W0rld.w1d3]

Who made this song its kinda vibe i am ssipping vodka singin this song

[@TylerRamsbey]

I made it

[@W0rld.w1d3]

@TylerRamsbey you made it wonderfull

[@erickespn]

The Glitch is batman

[@cv1849]

Nice walkthrough, but how did you know that the Glitche's IP was what it wasn't the other one?

[@Kricket2390]

The real song.mp3

[@lendumore]

oh shit! He's a real person!?!?! lol!

[@evgenyocean426]

That’s confusing, whose ip is 10.0.11.11 then?

[@AjGilliland]

I'm pretty sure that ip would be the system admin computer that he got access to.

[@chandlarjohnson9920]

I have a new echolalia song. lmao.

[@PenTestPioneer]

chabichabi