BlackSuit APT Breach

BlackSuit APT Breach is a blue team lab that falls under the Threat Hunting category and will cover the following subjects: Eric Zimmerman Tools, DB Browser for SQLite, DCode, MFTECmd, Timeline Explorer, FTKImager, Splunk, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Categories: Threat Hunting.

MITRE ATT&CK Tactics: Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Tools: Eric Zimmerman Tools, DB Browser for SQLite, DCode, MFTECmd, Timeline Explorer, FTKImager, Splunk.

Difficulty: hard.