BlindSentry

BlindSentry is a blue team lab that falls under the Threat Hunting category and will cover the following subjects: Event Viewer, DB Browser for SQLite, Wireshark, Splunk, Volatility 3, Reconnaissance, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Lateral Movement, Collection, Command and Control, Exfiltration.

Categories: Threat Hunting.

MITRE ATT&CK Tactics: Reconnaissance, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Lateral Movement, Collection, Command and Control, Exfiltration.

Tools: Event Viewer, DB Browser for SQLite, Wireshark, Splunk, Volatility 3.

Difficulty: insane.