After the excitement of yesterday, Alice has started to settle into her new job. Sadly, she realizes her new colleagues may not be the crack cybersecurity team that she was led to believe before sh...

Phân tích bản sao bộ nhớ và logs bằng MemProcFS, EvtxECmd, và Timeline Explorer để xác định các IOC của Andromeda Bot, dựng lại chuỗi thời gian bị nhiễm, và liên kết các thuộc tính đó đến nhóm APT....

Scenario You have recently joined the security team at ABC Industries as a Junior SOC analyst within their security operations center (SOC). You are responsible for monitoring the SIEM platform, i...

1. Executive Summary This report presents the findings of a network security incident investigation involving Ransomware at ABC Industries. The incident originated when a Windows 7 workstation dow...

Scenario A SOC Analyst at Umbrella Corporation is going through SIEM alerts and sees an alert for connections to a known malicious domain. The traffic is coming from Sara’s computer, an accountant...

Introduction Do you know the history of barcodes? After downloading and extracting the challenge file, we get a folder named Barcode_World: Inside this folder there are thousands of PNG ba...

Scenario You are a senior cybersecurity engineer. During your shift, you notice high-privilege actions originating from an unknown source that appear malicious. You have been given the ticket that...

Background and Introduction Will you survive the Squid Games? This lab is based on the famous movie Squid Game. The challenge gives us a single JPG file. Q1: What is the phone number o...

Introduction: DI Lestrade has intercepted a transmission from a criminal known as Moriarty. He’s asked his good buddy Sherlock Holmes and John Watson (that’s you) to use their skills as investigato...

Scenario: A sales executive at Greenholt PLC reported a suspicious email received from a known customer. The message raised several red flags: a generic greeting, an unexpected request for a money ...