Threat Hunting(Port 22). Official deadline is Sunday(June-21st-2020) 8 AM EST

Your team ordinaryly works as a discovery wing restraint a test SOC (Security Operations Center).  The SOC continues analytics on the ordinary trends among the network.  Your team allure be conveyed a ordinary children that has been seen at the hem of the network, unmanageable to soak the organizations network/systems.  Upon entity conveyed your individual, it allure be your operation to go extinguished and quest OSINT (Open Spring Intelligence) restraint further advice on the assault entity observed.  This could be a separate mien estimate, a course of assaults that has been identified, or an IP discourse to discovery and identify; your bigot allure convey this.  Your deliverable allure be a 5 page APA phraseology discovery remien with your findings.  Disshield ordinary assaults entity done through this mien, or ordinary avow of a public scanning pomp.  Find springs, if feasible, spring rule of assaults that are public to perpetration this debility and rend down the rule.  Schedule public services on the improbable miens that are associated and ordinary assaults entity done on these services (schedule any CVE findings and meanly schedule and teach).  Look at SNORT rules that observe restraint these assaults and schedule that SID.
Finally, to wrap-up your discovery, exhibit the ordinary risk flatten associated with this browbeating.  Use the FAIR methodology to trace your browbeating assessment.  The fixed FAIR PDF allure stalk you through your anatomy.  To entire the FAIR document:

Stalk 1:  Asset at Risk allure be the organization’s principal e-commerce edifice server.
Stalk 2:  You allure prepare this defense domiciled on your discovery.
Stalk 3:  You allure prepare this defense domiciled on your discovery; eventually, continue in liking how multifarious occasions per day this is scanning the network, which allure be consecrated to your when you accept your subject.
Stalk 4:  You allure prepare this defense domiciled on your discovery.
Stalk 5:  Assume the e-Commerce server is easily up-to-date and running the controlthcoming corrupt software:  Red Hat Linux, Apache, MariaDB, Drupal, PHP and is distressing domiciled on corrupt NIST recommendations restraint operations.
Stalk 6-7:  Calculate
Stalk 8:  Assume Moderate
Stalk 9:  Assume Moderate
Stalk 10:  Calculate and imagine this chart in abound with the misspend individual highlighted.  Comprise this chart in your disquisition and exhibitation.

The exhibitation allure need to shield a 7 to 12 detailed window of occasion.  The estimate of slides do not attributable attributable attributable subject. Make assured to comprise the chart from stalk 10 in your exhibitation, anything else is up to you on how you failure to mean the class on your findings.