Synapse Consulting - Lab Challenge #08 - Educational sample
===========================================================

  SYNAPSE LABS  |  EDUCATIONAL MATERIAL
  For education purposes only.

FILE:     challenge-08-c2-beacon.pcap   (28 packets, Ethernet/IPv4)
SHA-256:  783cf3544c4096a2c925293a1e9f1099962855cd5e18db7025c420cb9b329504

Synthetic packet capture of C2 beaconing from NORTHSEA-DEV (10.10.10.5) to a
command-and-control host. 100% fictional: the C2 is in TEST-NET-3 (203.0.113.66,
RFC 5737) and resolves a .invalid domain. No real host is contacted.

Open in Wireshark, or use tshark / tcpdump. Goal: find the C2, prove the
30-second beacon, extract the /a.ps1 object, and spot the POST /upload exfil.
Full walkthrough: https://www.synapse-consulting.eu/labs/
