BaseCamp Link: Overview: Assessment and Good Academic Practices
Tasks to be undertaken:
Task 1: Create a CARVER MATRIX for the provided coursework scenario and justify your reasoning (10 marks)
Task 2: Create an Attack Graph for the highest value target identified in Task 1. You should ensure that potential pathways are fully analysed and you identify and justify the optimal pathway. (5 marks)
Task 3: Investigate the provided PCAP file of network traffic captured during an attack to identify key information relating to the incident. Please see attached question sheet for some of the key information that should be discovered (please note this is not an exhaustive list). In your report you should include Interim Summary Memos for each finding detailing the evidence including a screenshot of said evidence (40 marks)
Task 4: Within the report provide a section detailing your findings from Task 3 as if you were presenting the incident report to the board of the CTI Utilities and provide security recommendations that will mitigate security issues that exist within the network, clearly presenting the business impact of each change. (30 marks)
Task 5: Map the findings of your work against the MITRE Att&ck Navigator (Enterprise and ICS where appropriate). Include an image of the Att&ck layer in your report. (15 marks)EDITABLE TEXT — COPY DIRECTLY
BaseCamp Link: Overview: Assessment and Good Academic Practices
Tasks to be undertaken:
Task 1: Create a CARVER MATRIX for the provided coursework scenario and justify your reasoning (10 marks)
Task 2: Create an Attack Graph for the highest value target identified in Task 1. You should ensure that potential pathways are fully analysed and you identify and justify the optimal pathway. (5 marks)
Task 3: Investigate the provided PCAP file of network traffic captured during an attack to identify key information relating to the incident. Please see attached question sheet for some of the key information that should be discovered (please note this is not an exhaustive list). In your report you should include Interim Summary Memos for each finding detailing the evidence including a screenshot of said evidence (40 marks)
Task 4: Within the report provide a section detailing your findings from Task 3 as if you were presenting the incident report to the board of the CTI Utilities and provide security recommendations that will mitigate security issues that exist within the network, clearly presenting the business impact of each change. (30 marks)
Task 5: Map the findings of your work against the MITRE Att&ck Navigator (Enterprise and ICS where appropriate). Include an image of the Att&ck layer in your report. (15 marks)