Black Basta Lab

Correlate Sysmon, Windows event logs, and PowerShell history to reconstruct a multi-stage Black Basta ransomware attack, identifying initial access, persistence, C2, exfiltration, and impact.

Category:

Tactics:

Initial Access Execution Persistence Privilege Escalation Stealth Defense Impairment Discovery Lateral Movement Command and Control Impact

Tools:

Splunk ELK CyberChef

medium

Walkthrough Available

2hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!