Situation
An internal host is repeatedly contacting an unfamiliar destination. The operations team needs evidence before deciding whether to contain the system.
LOADING SURFACE CACHE
SURFACE OBSERVATION
Guided preview / Campaign overview
Network Traffic Analysis
Follow the evidence. Connect the signals. Turn a learning path into an operation you can see — from your first observation to your next mission.
Authored environments · Preview only · No learning credit awarded
PATH
Network Traffic Analysis
PROGRESS
2 of 9
MODULE
03 · Trace a command channel
VIEW
WORLD
—
ALT —
PHASE OBSERVE
SENSOR RECONSTRUCTION
03
Mission briefing
Trace a command channel
Network Traffic Analysis
- Up next
- Mission
- 40 min
- 1,000 XP
Your assignment
- Trace the conversation and identify its endpoints and cadence.
- Examine the exchanges available in the capture.
- Summarize what supports a command-channel hypothesis and what remains uncertain.
Objective
Investigate a suspicious connection that may be carrying remote commands. Follow its timing and exchanges to distinguish a possible command channel from routine service traffic.
Satellite Overwatch
All modules 9
Select any module to locate it on the map and view its details.
No modules match your search.