TeamCity Exploit - APT29 Lab

In July 2024, CyberRange, a renowned cybersecurity firm, experienced a sophisticated cyber attack. The attack was executed by an advanced persistent threat (APT) group by leveraging various tactics, techniques, and procedures (TTPs) to infiltrate and compromise multiple systems within the CyberRange network, resulting in widespread ransomware deployment across the network. CyberRange's Security Operations Center (SOC) detected unusual activities, including files encrypted with an unknown extension and a ransom note claiming data theft. Investigation Scope Your task is to perform a comprehensive investigation to uncover the full extent of the breach and identify the tactics, techniques, and procedures (TTPs) used by...