Clay works in an environment with many Linux machines and investigates Linux servers.
Explicit Confidence 97% · Clay EP 42 Details
“we have a lot of Linux machines”
Person
person:clay
Information security engineer at a university who investigates a compromised Linux web server.
Information security engineer at a university who investigates a compromised Linux web server.
“My name is Clay. I am an InfoSec engineer.”
“I found that there was a root shell open.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Linux | Explicit | 42 |
| outgoing | USES | Intrusion Detection System | Explicit | 42 |
| outgoing | USES | John the Ripper | Explicit | 42 |
| outgoing | MEMBER_OF | WOPR Summit | Explicit | 42 |
| incoming | DISCOVERED_BY | SQL injection | Explicit | 42 |
Clay works in an environment with many Linux machines and investigates Linux servers.
Explicit Confidence 97% · Clay EP 42 Details
“we have a lot of Linux machines”
Clay USES Intrusion Detection System
Clay's environment uses an IDS to alert on cryptomining activity.
Explicit Confidence 99% · Clay EP 42 Details
“We have an IDS in place. That’s typically how we’ll be notified”
Clay USES John the Ripper
Clay used John the Ripper to crack the root password hash during incident response.
Explicit Confidence 99% · Clay EP 42 Details
“That’s when I started to run John the Ripper on it.”
SQL injection DISCOVERED_BY Clay
Clay isolated the web application's vulnerability to pages affected by SQL injection.
Explicit Confidence 96% · Clay EP 42 Details
“I was able to isolate it to one of two pages that had this vulnerability.”
Clay MEMBER_OF WOPR Summit
Clay is described as an organizer for the WOPR Summit.
Explicit Confidence 99% · Jack Rhysider EP 42 Details
“Clay also is an organizer [00:40:00] for the WOPR Summit.”