# AIG Shields Up: Cybersecurity Job Simulation

## Overview

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299069795-5e8fe84f-66f5-4058-ad71-861f8a3b1c84.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.f2VbGvoZSXCeu5l7PPf2-zL2SGQoB0DgbyiBj7WOC1Q" alt=""><figcaption></figcaption></figure></div>

## Scenario: Vulnerability Analysis & Email Draft

Based on the following two CISA advisories, an inventory of who uses Log4j, and the other following information, I drafted an email to the team to inform them of the vulnerabililty and the remediation steps.

ADVISORY 1: [CISA Vulnerability Advisory: Log4j](https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-356a)\
ADVISORY 2: [CISA Ransomware Advisory](https://www.cisa.gov/news-events/news/cisa-fbi-nsa-and-international-partners-issue-advisory-ransomware-trends-2021)\\

### **Task Description**

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299060577-d27d9491-9854-4d41-ab66-e2fad6069f6d.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.tS-k_6KzxHIE4ueuZDRg9W_z530Mmk7p-Csf9T358DI" alt="" width="563"><figcaption></figcaption></figure></div>

### **Inventory of Products/Services**

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299060556-2fb13c9a-4c87-409d-9b9c-d80e5cc4a458.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Z-G71n5H1qkad53S1EIpQquAIV7rTodzAjJNiAcCxgY" alt="" width="563"><figcaption></figcaption></figure></div>

## Email

I drafted this email from a company-provided template to inform the affected team of the vulnerability and of the necessary remediation steps.

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299062165-416c1750-ce66-493c-8448-cddcdcb0c40b.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MDYwMzY2NjAsIm5iZiI6MTcwNjAzNjM2MCwicGF0aCI6Ii85Mzg4NTUzNC8yOTkwNjIxNjUtNDE2YzE3NTAtY2U2Ni00OTNjLTg0NDgtY2RkY2RjYjBjNDBiLmpwZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDAxMjMlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwMTIzVDE4NTkyMFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTJmNmM4NGVmOGMyMWFkNzI0ZGVkNWE5MTVkNTZiZmIyNTlmMjZkOTlhMTdjZThkZTEzOTIzMGIxMjg3Y2JjZWEmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.l3ZlQ3gsBj0XJhQ9LZUvEJvc01Gg6n9mbq0YwXj7KuI" alt="" width="563"><figcaption></figcaption></figure></div>

## Scenario: Python Script

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299060388-fd735461-5bb1-4b55-b571-d8cff930e831.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MDYwMzY2NjAsIm5iZiI6MTcwNjAzNjM2MCwicGF0aCI6Ii85Mzg4NTUzNC8yOTkwNjAzODgtZmQ3MzU0NjEtNWJiMS00YjU1LWI1NzEtZDhjZmY5MzBlODMxLmpwZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDAxMjMlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwMTIzVDE4NTkyMFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPWQ5OTkyODI0MDY5ODhiYzY2MzFkNTA3NWFmMTUwNGU4Y2M4YzRkMmViNWU0ZTU5ODM4MTY1NWYzZWVhNDM2ZTEmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.QEm7RpJXi6DhNSYfZx_6COHx-7h7Jz2caDU4UAarCTs" alt="" width="563"><figcaption></figcaption></figure></div>

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299060349-4e8d9285-1299-44f9-a64a-26b4d5d9d637.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.TZf6QSHAnHDNF3a2Hp8S3OVJFW7jWJSFYc1FWAFgiWE" alt="" width="563"><figcaption></figcaption></figure></div>

## Final Python Script

Based on a template of a brute force password script, I completed the missing parts of the script until I had a script I could successfully use to decrypt the encrypted files.

<div align="left"><figure><img src="https://private-user-images.githubusercontent.com/93885534/299060751-3defcc4f-b345-4383-a89b-e8e0dc70405f.jpg?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Hoh1GPe0HxfZNRA1AWFEbf6rNKMhfAikDFxfvr9CWc8" alt="" width="563"><figcaption></figcaption></figure></div>
