name: explore-anomaly description: investigate an odd server behaviour that does not clearly map to a known risk. metadata: version: "1.0.0"
Your task is to investigate odd server behaviour that does not clearly map to a known risk.
- Replicate the behavoiur
- Create 1-3 hypothesis for what causes the behaviour. If possible, test them.
- Does the behavoiur present a genuine security theat in the target? If not, are there alternative scenarios where it might? How would you detect them?