BlackSuit APT Breach

BlackSuit APT Breach is a blue team lab that falls under the Threat Hunting category and will cover the following subjects: Eric Zimmerman Tools, DB Browser for SQLite, DCode, MFTECmd, Timeline Explorer, FTKImager, Splunk, Execution, Persistence, Privilege Escalation, Stealth, Defense Impairment, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Categories: Threat Hunting.

MITRE ATT&CK Tactics: Execution, Persistence, Privilege Escalation, Stealth, Defense Impairment, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Tools: Eric Zimmerman Tools, DB Browser for SQLite, DCode, MFTECmd, Timeline Explorer, FTKImager, Splunk.

Difficulty: hard.