So today was a bit tiring. Two practical exams, one about SOC and the other about malware analysis. I finished both early but one or two questions were a bit frustrating.


It all started with the SOC lab where we used Splunk. I cannot give much details but the first few questions were more theoretical and the way it was spelled it was a bit controversial. I think everyone in class found those answers a bit strange. The exam didn’t feel very tough but that’s because we were over prepared for it and I personally, still did more Splunk rooms than I was supposed to. The questions were pretty straightforward and it was mostly about searching keywords.

In the afternoon we had the malware analysis lab. We had to investigate a sample of malware on the attack machine and on VirusTotal. Although, there was one more site we had to do some research that Kevin gave us as a little clue for one of the questions. Unfortunately I didn’t remember that clue so I was stuck for a while on that question when I miraculously came across a certain website that gave me the answer.


Both of the labs went really well so I’m happy with the results, although I was a bit frustrated because today was a bit intense. I feel very tired. If these were normal rooms I would be okay, but I just feel like my head is exploding and I really need to rest now. Excited for tomorrow’s lab on Pentesting though!