Assets to connect with blue team investigation:
- FQDN – https://wazuh.invadeinvestigate.win
- IP Address – https://192.168.61.10
- Username – blue01
- Password – Defender-King1!
Red Team assets to attack:
EWS VNC server:
- IP – 192.168.61.158
- FQDN – win10-ews.invadeinvestigate.win
WIN-UB5Q52138VG:
- IP - 192.168.60.51
- FQDN – win-ub5q52138vg.invadeinvestigate.win
Subnets:
- 192.168.60.0/24
- 192.168.61.0/24
- Members - 192.168.62.0/24
- DNS server - 192.168.60.5