.png)
actavistyphoon
Principal Security Operations Analyst
Level 60 87162 / 101166
*Rankings computed based on core modules (87162 pts).
Joined in May, 2024
actavistyphoon earned 10 badges
Rap Beef
This analyst investigated a themed scenario involving rival hip-hop artists. They used key cybersecurity skills to identify suspicious communications and activities, analyzing internal messages to track unauthorized exchanges and uncover patterns. This exercise reinforced critical skills in data analysis, threat detection, and the application of cybersecurity principles in unconventional contexts.
Issued on: May 27, 2024
Balloons Over Iowa
This analyst completed the "Balloons Over Iowa" module, investigating a phishing and ransomware attack. They identified command and control connections, detected data exfiltration, analyzed Mimikatz activity, and observed shadow copy deletions, demonstrating their ability to effectively respond to and analyze cyber threats.
Issued on: Jul 05, 2024
Inside Encryptodera
This analyst investigated an easy-level insider threat scenario by identifying suspicious employee activities, analyzing internal communications, and tracking unauthorized data transfers. They used Kusto Query Language (KQL) to analyze network flows and identify abnormal data movement to build and insider-threat profile.
Issued on: Jul 09, 2024
Envolve Labs
This analyst completed the "Envolve Labs" module. They demonstrated skills in using Kusto Query Language (KQL) in their investigation that included identifying phishing campaigns, analyzing command-line activities, and uncovering credential theft and data exfiltration. They also learned to cluster and attribute attacks to specific threat actors, connecting malicious domains and email addresses to threat actor behavior.
Issued on: Jul 11, 2024
Scholomance
This analyst completed the "Scholomance" module, which focused on threat hunting with a threat intelligence-driven investigation. Using Kusto Query Language (KQL), they reinforced their skills in threat detection, anomaly identification, and data correlation.
Issued on: Jul 15, 2024
Virustotal Fundamentals
This analyst completed the "VirusTotal Fundamentals" module, which focused on using VirusTotal for comprehensive threat analysis. They demonstrated the ability to pivot around datasets, utilizing file hashes, domains, and IP addresses to uncover and correlate threats. This exercise reinforced their skills in leveraging VirusTotal's capabilities for detecting malicious activity and understanding the interconnections between various threat indicators.
Issued on: Jul 16, 2024
HopsNStuff
This analyst completed the "HopsNStuff" module, investigating a cyber attack through the analysis of endpoint process events and command-line activities. They demonstrated skills in identifying anomalous file behavior by using Kusto Query Language (KQL) to uncover malicious activities. The investigation highlighted their ability to analyze and deobfuscate malicious PowerShell commands, effectively identifying and responding to data exfiltration techniques.
Issued on: Aug 03, 2024
Azure Crest
This analyst successfully investigated a ransomware attack against a hospital. They demonstrated the ability to pivot around datasets using Kusto Query Language (KQL) to uncover the risks associated with prioritizing cost over security. This exercise reinforced skills in identifying vulnerabilities and understanding the broader implications of inadequate security measures in a healthcare context.
Issued on: Sep 22, 2024
Critical Compromise (ICS)
This analyst completed the Critical Compromise in Chicago module, demonstrating their ability to investigate a malware-based attack on a SCADA system. Through their use of Kusto Query Language (KQL), they uncovered the deployment of malicious software that disrupted the power grid. Their investigation helped identify the attack's origin and provided insights into the attackers’ methods, ultimately contributing to the restoration of normal operations and improving defenses for critical infrastructure.
Issued on: Oct 21, 2024
Jojo's Hospital
This analyst completed the JoJo's Hospital module, investigating a cyber attack involving an Initial Access Broker and a Ransomware-as-a-Service (RaaS) operation. They demonstrated skills in detecting phishing and malvertising tactics, tracing unauthorized network access, understanding hacker collaboration, and analyzing ransomware activities.
Issued on: Nov 17, 2024
actavistyphoon played 17 games
Balloons Over Iowa 4405/4405
Envolve Labs: With a twist! 950/950
HopsNStuff 14265/14265
Dai Wok Foods 11585/11600
DAILY7 🌎 147/4420
Sunlands 3150/8437
Spooky Sweets 3890/7640
Scholomance 5640/5640
A Storm Is Brewing In the Lab 720/5670
Inside Encryptodera 3990/3990
AzureCrest - The full version 7560/8790
System Shutdown at Azure Crest! (Short Version) 4800/4800
A Rap Beef (START HERE) 950/950
Jojo's Hospital 610/610
VirusTotal Fundamentals 2620/2620
A Rap Steak 19010/19010
Critical Compromise In Chicago - ICS 2870/2870
Pattern of Life
Issue Badge to actavistyphoon
| # | Image | Badge | Description | Action |
|---|---|---|---|---|
| 1 |  | Advanced Persistent Analyst | Someone who failed, got up, and tried again! | |
| 2 |  | Helping Hand | This award is community-nominated! Someone in the KC7 community has recognized this user for their contributions to others! | |
| 3 |  | Notre Dame Challenge | Completed the cybersecurity challenge event at Notre Dame in June 2023 | |
| 4 |  | KC7 Top 10 (2023) | Awarded to top 10 KC7 players in 2023 | |
| 5 |  | Cyber Challenge Series: Team Winner | This badge is issued to KC7 players who were members of a team that placed top 3 in a Blue Team Cyber Challenge event! | |
| 6 |  | Super Fan | This badge is issued to any KC7 player who has completed 3 modules or more! | |
| 7 |  | Most Improved | Someone who really improved over the course of a KC7 event! | |
| 8 |  | Cyber Challenge Series: Winner | This badge is issued to KC7 players who placed top 3 (as an individual) in an Blue Team Cyber Challenge event! | |
| 9 |  | 30 day hot steak | Awarded to a user who has answered a question for 30 days in a row. | |
| 10 |  | 90 day streak | Awarded to a user who has answered a question for 90 days in a row. | |
| 11 |  | Inside Encryptodera - Event Participant | Participant in the February 2024 monthly event featuring the Encryptodera module | |
| 12 |  | The Teacher | Someone who really helped lift up their peers and enabled others to learn! | |
| 13 |  | Bright Future | Someone who shows a lot of potential as a future cyber analyst! | |
| 14 |  | Azure Crest | This analyst investigated a ransomware attack, where cost-cutting measures led to a single point of failure in their systems. This exercise highlighted the risks associated with prioritizing cost over security and reinforced skills in identifying vulnerabilities and understanding the broader implications of inadequate security measures in a healthcare context. | |
| 15 |  | 2024 SANS New2Cyber CTF Participant | This badge has been awarded to those who took part in the 2024 SANS New2Cyber x KC7 Capture The Flag (CTF) challenge, which involved investigating a ransomware attack on a hospital. | |
| 16 |  | 60 day streak | Awarded to a user who has answered a question for 60 days in a row. | |
| 17 |  | 120 day streak | Awarded to a user who has answered a question for 120 days in a row! | |
| 18 |  | Intro Master |