BumbleBee - GOLD CABIN Lab

Correlate Windows event logs and Sysmon data across enterprise systems using ELK to reconstruct a multi-stage cyber attack from initial access to ransomware.

Category:

Tactics:

Initial Access Execution Persistence Privilege Escalation Stealth Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration Impact

Tools:

Splunk ELK SIEM

medium

Walkthrough Available

4hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!