Two Active Computers

Part of the Stopping the Spread section of Coddy's Cybersecurity journey. Lesson 15 of 20.

Challenge

Medium

Ticket from Sam, IT lead

Sam’s team has completed cleanup on the earlier computers. Two newly reported computers, returns-pc and stock-relay, are sending customer records outside Lumen. Investigate their connections and contain both before the next upload round. Keep their processes available for evidence collection and leave checkout working. Backups from the contained computers may pause during this incident.

Try it yourself

Terminal

All lessons in Stopping the Spread

1Trace the Connection

Follow a Connection Test a Route Follow the Whole Order Inside the Company Orders Without Payment

4Recover and Verify

Prove the Block Recover in Stages Report the Impact Review the Boundary Lumen Stays Open

2Close the Unwanted Route

Destination Rules Rule Order Outbound Rules Allow the Needed Work Two Unwanted Routes

3Contain More Than One Computer

Isolate a Computer The Exposed Password Follow the Spread Keep Customers WorkingTwo Active Computers