You’ve signed up for the workshop, you've studied to the data, and you've even gotten your hands dirty. Now is the time to put your knowledge to the ultimate test!

The data you've been provided during the workshop contains several defense evasion mechanisms that you have had a chance to observe and hunt for. However, there also exists ANOTHER form of defense evasion that your instructor touched on. It is up to you to take what you have learnt throughout this workshop and apply it to discover the other defense evasion mechanism, as well as answer some questions.

For those that successfully answer the questions, you will be awarded the Cyborg Security Threat Hunting badge for Defense Evasion (Level 1).

How Do You Claim Your Badge?

If you attended the LIVE session, all you need to do is redownload the data and then re-import that data into your Elastic instance to begin hunting. 

If you are attempting your hunt from the RECORDED session, the data is already imported into your Elastic instance during set up.

HINT: Remember, whether you attended LIVE or RECORDED sessions, your instructor gave you a hint during the course. Use that hint to begin your hunt!

REMEMBER: You can submit as many times as you like!