Security Onion and Sguil HD

In this video, we use Sguil to continue our investigation. We pivot to Wireshark and extract a RAR file that was exfiltrated from our environment. We then open the RAR file to see our confidential data that now belongs to our adversary. If you have questions or problems, please use our mailing list: https://github.com/Security-Onion-Solutions/security-onion/wiki/MailingLists