SANS SEC501 Enterprise Defender 2016 Labs

[Prohibitive]

SANS SEC501 Enterprise Defender 2016 Labs | 7.99 GB

Note: There are malware samples included in these labs which is why it was created as an ISO.

Contents:

# bitfit 1.0.0 output generated on 2015-09-06 12:01:49.143000 by phenry
# C:\\bitfit.exe e:\\SEC501\\
# filename,MD5,SHA1
7z920-x64.msi,cac92727c33bec0a79965c61bbb1c82f,4173fea2af9a595fa0be1ef8251f412229687be1
7z920.exe,b3fdf6e7b0aecd48ca7e4921773fb606,55283ad59439134673fc32fc097bdd9ae920fbc6
Day1/192.168.1.2.conf,fb133c98646183aaf24c6eefe1e3c4c7,71264c440b17dfd356e37d9474a1f4c9997e35e7
Day1/192.168.1.2.conf1,8e6898de3b63db8fdcfbabe3678a112f,0ce0b33bcd662f947f23926db25b150fdb02df13
Day1/192.168.1.2.conf2,ad4df6e5b2306681f6e758c4c56cb9f9,fce3566cb86380eae2a9ce9b27b59cb12e5db516
Day1/192.168.1.2.conf3,1d8c2c4d9c37f6d50be277c6a2cb1147,02900e7ca2ee126e74ea478a45447dc55b1d4512
Day1/ActivePerl-5.16.2.1602-MSWin32-x64-296513.msi,6eae7e5851c0b44adf7da64eb3dbea5c,a7e7ad36284b891e5b9060325986f09cb8ad8c5b
Day1/ActivePerl-5.16.2.1602-MSWin32-x86-296513.msi,63339975ee5f62c636ca6ced99df9869,df50c98dcc09c650b620decce6caf42940e6046a
Day1/ios7decrypt.pl,05c2e403c21682e24f826d4046ebab36,ada9a8d6a9a670a6b3c12526d193da57123ee465
Day1/onceperfect.conf,23b95a727a8b49a3cbd260db16637ae9,972b4a562bf5b3b3ac66247e2a90ad5356e34470
Day1/router-passwords.txt,6735ff15833df68fc70864deba0ffa6f,dbdf8fca308975753b531e14407c64a9ec7699e2
Day1/wrar393.exe,b3b121ccac92a71152d3aa6a783927d4,b51e3dcd8edaad1cb77550a9cfd6266c4925c630
Day2/NetworkMiner_1-4-1.zip,8a1a73acbf0ee2fc02a54e60960ef3fc,bd1c5cbd0b30e878c0858471c2f4f6756fb31df9
Day2/PCAPs/CVE-2003-0533-EvasionTCPSegment163-NetBIOSInitialChaff-OptionChaffGetRequest-SMBResourceSegment33-MSRPCSessionFragment32.pcap,229e241e3080bf6ce757a61a50ab11c1,c58187d2612fa1edb10b96b43706ebb30b34a646
Day2/PCAPs/CVE-2003-0533-EvasionTCPSegment3-SMBDecoyWrites5-SMBResourceSegment33.pcap,29240d0645f13079992d83c12cb64273,83ab77c07979e4f3a729cbf1ef9c23448b4d054d
Day2/PCAPs/CVE-2003-0533-EvasionTCPWrappingSequenceNumbers13-TCPSegment4-TCPSegmentOrderRandom-SMBResourceSegment33MSRPCSessionFragment32.pcap,678ebcc5fb5c34e8fa89c209cda6767f,99cab483e7166c9abff2d59fe613908ff031c2f4
Day2/PCAPs/CVE-2008-4250-EvasionNetBIOSChaff-OptionChaffEmptyKeepAlive-SMBResourceSegment33.pcap,43e66fe12533c0828c9ceb43ce960f9d,61a3231e0b05f744cb28460262acaa5c601f2086
Day2/PCAPs/CVE-2008-4250-EvasionNetBIOSChaff-OptionChaffEmptyUnspecified.pcap,c2fef624411af55cc0d9e23377accfda,fb764f02a8aafbcec7efb58f7dc8fa38d587a10d
Day2/PCAPs/cve-2008-4250_base.pcap,9be80523c6e02b9b1f8c6ffc2df55b92,6af76e905bfc8c27674541fc6b9673a1aa14de60
Day2/PCAPs/cve-2008-4250_writemode_frag.pcap,be0c2054653fb7c2ea4125c7fd2e77df,2057b42bd1fcf9c7b3d2f8eaef6deeef80cfc675
Day2/PCAPs/dns-remoteshell.pcap,3451fc588eb703545b4ecd26d203acb5,dae771aded9aa708b131cf0de16cb14efb943198
Day2/PCAPs/ftp-attack.pcap,341d3ad4e2d29bd3f1297b9058df6d5b,981df17ef3d2edfef3bfc5f33475faf725cee989
Day2/PCAPs/ipv4_8byte_fragments_tcp_2byte_segments_smb_1byte_segments.pcap,c8971903c58365d4c72fdcb5c8a229b3,f56edc0f834ee98db8146c92d190ec25b02dd9f8
Day2/PCAPs/ipv4_options.pcap,0905ede2a29e660ed4ff3dada17d976a,037bd0c1e8ad0b56f4f63908030cf980a48e7b50
Day2/PCAPs/msrpc_25byte_fragments.pcap,3f7c55f332b408c1e9183fdc7e391fa2,bb508127022a8dc5049456b7354f9fb0d055fed3
Day2/PCAPs/msrpc_big_endian.pcap,6d0258435fdaf9abb1b486e41bc17575,bcab2c590545016d1c46dd4b564f31b4e8546666
Day2/PCAPs/msrpc_ndr_change.pcap,fe4ca525b379e08d5ac606b8a8ddea83,93cb384eced6b9831c0fc8228990cc0a03f1b3b3
Day2/PCAPs/slammer.pcap,3970f783b57768e09f38476eb3068cc2,a08bee1cbd9947ab0bc31ee4399a07233780a151
Day2/PCAPs/smb_15byte_segments_msrpc_33byte_segments.pcap,9daa225593a983f90ffa64ff89dc01ee,e144563d4dda0bacaf1015fbfc5c00584821e065
Day2/PCAPs/smb_1byte_segments.pcap,6e4bb00374be8337f5ed76d6ca82fe2d,a4d12f679586280827eed921f9ee5d83a19e7d6e
Day2/PCAPs/smb_32byte_segments.pcap,27e780fc970d617fbf7873e607dc76dc,dedaa3cc16e3bcc41fe5497db19dd27d47d11faf
Day2/PCAPs/smb_filename_change.pcap,e4cfd21cee742815a21f11185ce3e31b,66e62b346c55f348678d199ea2511c43634395c0
Day2/PCAPs/tcp_8byte_segments_10byte_oldoverlap.pcap,54ad0bc9e558692d4922e048302f1108,71dfc86b91efec6fc3fd768c9c04386326f68226
Day2/PCAPs/tcp_8byte_segments_random_order.pcap,b0737c601a2312902498449fe2fb943b,ba9c814e2d02a1b8c408b922b6655c2cc12d2ecb
Day2/PCAPs/tcp_single_byte_segment.pcap,a43bdfe27f21a04cfd671b96f47ea013,7168385f56391324cb6f30da3941a7f25c5a674b
Day2/PCAPs/tcp_time_wait.pcap,ebb7174f6919079b9c5adfa54546b38d,35c36e1dbc102876e5ec4a14a7f62d9eae04913a
Day2/PCAPs/tcp_urgent_pointer.pcap,63c0025a12823b68672339a9bc8546be,8a40379ba0de0fc0118bc6144e65bc85902452c8
Day2/PCAPs/teardrop.pcap,21b2c41a061b2f1532b50fdd7d52295c,42268d0c0e0a29c3bd990ac4cb84d4905217521d
Day2/WinDump.exe,7b50683722d9efd3dccbb9e65ec0f2df,d59bc54721951dec855cbb4bbc000f9a71ea4d95
Day2/WinPcap_4_0_2.exe,2b8f5a693275102ae1d48fc138685c80,d91b76628757c5d2f5cbb3963dc0d8d8e9d816a5
Day2/attack-trace.pcap,6ad68928fe8062632c12c432ce785ac5,d261a70feeeabcd49a6cfdd33087989b472fd80d
Day2/wireshark-win32-1.4.4.exe,2571d4519c8d43399225ebffde88a813,3e4bebce27a0999a0d9de0c54e9ed164d2b94a68
Day2/wireshark-win64-1.4.4.exe,04aac70dc7b30ae8e8c76e2f5e64f5bd,26f9f8eef8b1a4a856a1d583387eb986f39031ab
Day3/UltraVNC-102-Setup.exe,d22cf28dda2896149e57542f8b7f015b,c8b24a54b6ca0f48c7f25e4e3491338723f6b50d
Day4/Labs/Lab1/SIFT 2.0/sift_workstation2.0.zip,731868241e07ca4727a260607780d784,9cae8b02d59bdce6fa50eef7d07a4e62215d9fed
Day4/Labs/Lab2/FTK Lite/FTK_Imager_Lite_v261.zip,3212427ea385c3f4d823ebe5ef8cfdba,5d891a55e90f9212abd11aa7e49aacbdba3b0a27
Day4/Labs/Lab2/linux-pcmcia-170-drive.img,b6a21b973cc13e21bc7bde6e736c5edc,3b660512a92ef2216117dd77884f49f8d4c19949
Day4/Labs/Lab2/winXPPro-Snapshot1.vmem,a554bcf329edf87f9a2bbbecfcae5aca,d17dbf576fea4e50fb46fe3c644de5643253d367
Day4/Labs/Lab3/IISLOGS/Win2000Box/ex090723.log,fc708241e4f7d1016a7df734c87f3d86,4ba7802b4bfdfae6dc953f66b04f72b90023c20f
Day4/Labs/Lab3/IISLOGS/Win2000Box/ex090724.log,893bf8fc3d15f1cfed9557b35d191429,d82e8c692ac7e9bbd2fefb3d934d93f44b9305a9
Day4/Labs/Lab3/IISLOGS/Win2000Box/ex090725.log,2a511e83dd96b7e8efbfd9ad296ab536,96cf677861f23f016ca7ecf94ca3305175c1181c
Day4/Labs/Lab3/IISLOGS/Win2000Box/ex090726.log,62b38d336137612c5ae7661f83ea29f2,c7a79b2b07927b0fd6499aa2b1f0f959f91d7e93
Day4/Labs/Lab3/IISLOGS/Win2000box.txt,75b386a342a42d52f1440bf095987640,c714fa64d787c22adba2912db767714250e2e742
Day4/Labs/Lab3/IISLOGS/Win2003Box/ex090723.log,74b97ea88d1373ca69e58464d8f646e6,ec33c2a7fcc2c05fdc67c08a6ec43fe50705bc5b
Day4/Labs/Lab3/IISLOGS/Win2003Box/ex090724.log,0a893cbd26cdbde6faa7f8486e129671,506923cc0716f4ce3ff2c8c59e045bc0764b5217
Day4/Labs/Lab3/IISLOGS/Win2003Box/ex090725.log,2b7137ad53901fd94e04ed029e2c81e6,eabeafe0526f5d60681156db991a0db1c9548a9c
Day4/Labs/Lab3/IISLOGS/Win2003Box/ex090726.log,71e21fd495e6bf34e0df1dab21d30a67,cb26d8721abcf0a6bde7c1431de6aedf63275a24
Day4/Labs/Lab3/IISLOGS/Win2k3box.txt,ae90a3d414cd61d83e72a211d51eb220,cfc431e2930fe10e591556ed1c0c05d2c565e6a6
Day4/Labs/Lab3/NT_EVENTS/TESTLAB-PC1-XP-appevent.evt,db09726ca25c37533d339adbff13ae4c,094bb130e42a28374685cb819fb32503c20e852a
Day4/Labs/Lab3/NT_EVENTS/TESTLAB-PC1-XP-secevent.evt,4407052e2885c8319711f5112fafaf5c,8df7390978ff423ce2e7caafde3bae33a8b727eb
Day4/Labs/Lab3/NT_EVENTS/TESTLAB-PC1-XP-sysevent.evt,e52bba72e756c89ff1a7a59a6c0966b5,48eabf9acf27f76935b51c80c211dfc627c88e1c
Day4/Labs/Lab3/Registry/NTUSER.DAT,3f8f5acbab8913af83fca5d2fa488745,0f0b067076876507afafdff4ec8ab99e32bac963
Day4/Labs/Lab3/Registry/TESTLAB-PC1-XP-SAM.reg,92f00db5e0e70aeeda90b4c625a25b8b,c0b92e17d8fb695fcf110056fde6de6f67fd3d96
Day4/Labs/Lab3/Registry/TESTLAB-PC1-XP-SOFTWARE.reg,90999c6f43a07a2a3f8d1941cf6be4aa,e1f9309643fb4d8ff17d462411d55997db5f218e
Day4/Labs/Lab3/Registry/TESTLAB-PC1-XP-SYSTEM.reg,15150ebce2592db17d4ef449fe80a0d8,af0a7c8c79025611cba721163a5416d1cd942ea6
Day4/Labs/Lab4/501.bat,c5b87d3141ca9cb30ccffa7df7fa6236,a218def2727b97bca0a83feab1ea8992f86104a3
Day4/Labs/Lab4/NetUsers.exe,b01a4d9fbb85b387dd890fca73c212d3,1caf5e72abfc852707da2cbdaa93fe98cf977ea0
Day4/Labs/Lab4/Psinfo.exe,af4ecbb4470223db83e47a81bcc118ff,9d9c742f58577c4abbd4f37a44f9a6913e430959
Day4/Labs/Lab4/Static-Binaries/linux-ir.sh,af3904a114709d59bc3c286d9a5b900b,183959ef833b65043c8f2f0fc483f9ad9357e288
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_arp,6e51fbe4f0d6066ab321de0cf5c45b11,ac5ffc161b82f2254e82eb00600951bf09e1f0e1
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_cat,a7415051d62f05b44c99afc7a530e8d5,facb8f766674e8fea7ed8727079799f8dc6348d8
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_dmesg,f88993897f46a079c7edab84daa410cd,a52980247ced63d37be2e81754f9676723e3fab5
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_dstat,bf03511777b0bd107dbb2a4651454f32,94b9281b53b54f8c6667a23b12f55e60dcb093ff
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_du,1033b4a26422e0728a91a00c3749ea48,1f85794ae1d6f3e66e92d6de500eec0c3eb7eddd
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_echo,acad7091695dfd56c1b735a126b9c26c,8b23b76715ab456df3829dd21a526aad6ad60a42
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_env,23f953713459e37d9668aabc24cfcfee,8b0b3b72ca4931b8727b643329690028968a14cd
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_ex,5a4cffec7613c074a5cfbddc391682d9,dd56fbe54f554ce7e84921887605897a3c987bec
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_fatback,6491263b27eed64ea85ba4fd7f454f35,f5419297afc9c6bd4e86011cd15ae4bff6f0b573
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_ffind,6d97829cefe49ac3546d591b43f31f8b,4cdf8d444529b11c95b59b7215d273f7d92a3511
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_file,da427c8d2fa97c7e8281a5f4c2f1da87,5f5e0593b379d3393702ecbfa8588bb9085c89c6
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_fls,4fd2a3d8953e1061f5fd082bd1219a6c,387b663c88dcc749024a92cfb9f72ab92e9b37a4
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_fmt,ce7fa28f513392a801f1ee9c59fc6d25,994b2ba96ba420db38d65a60c421b324ee690762
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_ifconfig,5eb57756f9bc9a096434b6b7a576b317,1f65fbd580151a36658f6e507ea13ce05c718dd6
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_lsof,360d8fc46064f7c6112ae6e32e9d1fb6,eed5800259087be03a1f92fed4358190876069ab
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_md5sum,eb8af25e7260ccd020df32be98474107,827afe23a853d1907bd4dc92aede0eb83d80a67e
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_netstat,90018770a335267b832f1037bb1ead4f,32110e78e693141266b593f0bca1b82d2cda278b
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_ps,38896b9ec21023541c8edbee2ddc0a8e,f30ee3f4621ee7234750267dc110ff300153a3f0
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_uname,08554c6a3641f3712020a057170c4670,856f9e5e1a18c3e03b470700be1fdb4c3384f38e
Day4/Labs/Lab4/Static-Binaries/linux_x86/t_who,2967d430d8deb12cea7dd335487cd71b,6845dbaf4abe14e2c347f728f6f0223f7a3a3133
Day4/Labs/Lab4/auditpol.exe,7079f5e2df546c58232beab63df0bf24,4c5147ae3095f612eca4a0368b0d4fd3668ee6b6
Day4/Labs/Lab4/autorunsc.exe,b782323ff2cf3075921534ad1c971170,08194252b225da5abc29c684484124d5b2234f51
Day4/Labs/Lab4/handle.exe,24c5cb3fcbce517ea2fac5cf023969d0,b6e62314b4dbef6ea83aca0fc70dd753ed4c40cc
Day4/Labs/Lab4/promiscdetect.exe,117ec27602980ae13307a7c2021a5d90,00a1d70da6ef869b5377c56dac8ff7d4c89f6d2e
Day4/Labs/Lab4/psloggedon.exe,6500c15f856bbfd0b28bd4ebf6e1662a,a259ae733c29c0780b6842d8072e9d5a609c4d43
Day4/Labs/Lab4/tcpvcon.exe,1e2e03cd8320cf675e2bcb781f62270c,c519521c15c58b2e80880b96c757923b930e501c
Day4/Labs/Lab4/tlist.exe,0a5b140fa36ff056b14724d74ed14684,abb4026bff259d0a8e9ec4399ed6f998a29484f5
Day4/Labs/Lab5/SUSPEND-RH9-COMPROMISED.zip,2069bf5ea984935a1e1d2adb19aed97a,587c97c96d24a322803060451f4a5b2700a5ae43
Day4/Labs/Lab6/NTUSER.DAT,4ed359741a95700e27bf6ceaedd5bffc,e11d36ffd7f0266647dd364f8e977472e34d0f3e
Day4/Labs/Lab6/PZ-TACMEPC1.zip,4f5714f4e3a375c0a4196f57d2c6fd52,1b597addf94e4477e1f05887c20dd6fbf2e90164
Day4/Tools/FixEVT/fixevt.exe,d42d6916f64f9208525f0e82b7d56428,53dcc5bb34c2c12886395767b9979b493ab1248a
Day4/Tools/Highlighter/MandiantHighlighter1.1.1.msi,4d8de3f7121a95c501b3125e9847e4fd,cd56a9380920b4111666447e0b6de013a2da5173
Day4/Tools/LogParser/LogParser.msi,545198ecde4db562158605c903d3f87b,da0d08b14246fd25569443c5612cd78c42cea47f
Day4/Tools/RegRipper/rr_20080909.zip,3262036da458c815f99df65e54f9ad10,66e5d3ed2e49909b4a616da448ef599d82507187
Day4/Tools/Sleuthkit/sleuthkit-win32-3.0.1.zip,58f2cfe99912ea4e321358dcb27a4762,1c2774ad46870da71c4ac86e83f8ca0106eb6cc7
Day4/Tools/VMware Player/VMware-player-3.0.0-203739.exe,d7ecfd5d400a5b44bfaee4e8facc07f5,78f591b3bf8a8146b5bcc191722dff4a6f725439
Day4/Tools/WinRAR/wrar391.exe,cf02f56363865246facb30670077fb5e,d9ecba19981f8cfd8159409ea03702c6e751008e
Day5/Winrar/wrar390.exe,2e38f5b68304888fe0d9bf4f4b04c75d,f97978ee88ef01f2e3cd03ca423db67510cd0ea8
Day5/course.exe,ae60e0b8a9c29f8d36d3fdc27e6a5e99,0a0f55f7185ea4a9c4363fb4e401eeef1a2ffcef
Kali-Linux-1.1.7z,d1b41c6680cb78092f0a94f0d47d80ba,fb6fe6ccb22a4d5b14ba82cfef874d95efb5c9d6
VMWare Player/.DS_Store,9076556eb12db95e6fe194fad726f081,0f09c0cf4810cc0669e566a58f9e221885153bc7
VMWare Player/VMware-player-2.5.2.exe,01356d729e9b031c8904e9560a02c469,447549a9f19d68db882bb6d6b62f3f6ecac2fa5b
VMWare Player/VMware-player-3.0.0-203739.exe,d7ecfd5d400a5b44bfaee4e8facc07f5,78f591b3bf8a8146b5bcc191722dff4a6f725439
VMWare Player/VMware-player-4.0.1-528992.exe,2f6b2113fe380b8e45d8cce55fc3152d,081667905631213e9f7acbc27e92cb2cb9449a98
VMWare Player/VMware-player-4.0.2-591240.exe,8ec9f7cb9556bad9c910a8a9794b3b57,d3613399fc25273ea51ead82ad8bf359f7fda6d1
wrar390.exe,2e38f5b68304888fe0d9bf4f4b04c75d,f97978ee88ef01f2e3cd03ca423db67510cd0ea8

Download Links

Download Via Rapidgator

https://rapidgator.net/file/d26b463a0b38a6118dec7d62e0668b4d/pud65.SANS.SEC501.Enterprise.Defender.2016.Labs-LOL.part1.rar.html
https://rapidgator.net/file/ccd965c15d2550fd7aeda2988efa62c6/pud65.SANS.SEC501.Enterprise.Defender.2016.Labs-LOL.part1.rar.html
https://rapidgator.net/file/8dff5b342b70fa5b09f7fff43be13ea7/pud65.SANS.SEC501.Enterprise.Defender.2016.Labs-LOL.part2.rar.html

Download Via Nitroflare

http://nitroflare.com/view/C15971B7D124603/pud65.SANS.SEC501.Enterprise.Defender.2016.Labs-LOL.part1.rar
http://nitroflare.com/view/C9F6429568923EA/pud65.SANS.SEC501.Enterprise.Defender.2016.Labs-LOL.part2.rar