![Page 1: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/1.jpg)
Collegiate Cyber Defense Competition
Ben Actis
![Page 2: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/2.jpg)
NECCDC Layout Prep Actual game day
Readers digest version
![Page 3: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/3.jpg)
NECCDC Background
![Page 4: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/4.jpg)
Defensive only Rewarded for
◦ Data Preservation◦ Services◦ Injects
Penalized for◦ Successful breaches
Rules
![Page 5: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/5.jpg)
Layout
Red Team
Cisco Router 1841
Cisco Catalyst Switch
![Page 6: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/6.jpg)
Perimeter Approach Lockdown guides Detection
Prep
![Page 7: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/7.jpg)
Passwords◦ Screen saver exploit
OS Switch Compromised router
◦ Keylogger◦ SNMP
Wireless Printer Windows 2008 down DNS poisoning Security websites
Day 1 11am -7pm
![Page 8: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/8.jpg)
Windows 2000 domain◦ IPsec firewall on 2000*
Unix Based◦ IP tables◦ tripwire
Windows 2000 hit◦ RPC hit on port 135◦ Similar to blaster, NT authority shutdown◦ Refined IPsec
Internal vulnerability scans
Day 1 continued
![Page 9: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/9.jpg)
Windows 2008 issues◦ Compromised?◦ Image issues◦ AD replication failed◦ Hypervisor exploit
RE3 to Cent OS 3.0 Win XP reinstall Wireless fiasco Slackware HTTPS
Day 2 8am-7pm
![Page 10: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/10.jpg)
Day 2 Layout
Cisco Router 1841
Cisco Catalyst Switch
BROKE
BROKEBROKE
![Page 11: Ben Actis. NECCDC Layout Prep Actual game day](https://reader035.vdocument.in/reader035/viewer/2022062314/56649ea85503460f94bab43a/html5/thumbnails/11.jpg)
Windows 2008 server core Host Based IDS Consolidated logging Placement
Prep for next year & ranking