ClawHavoc

ClawHavoc is a blue team lab that falls under the Malware Analysis category and will cover the following subjects: CyberChef, Detect It Easy, Splunk, x64dbg, IDA, Ghidra, Windows Event Viewer, CFF Explorer, HexEditor, jq, UPX, AWS-CLI, Sysmon, Python, PowerShell, Azure AD Sign-in Logs, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Categories: Malware Analysis.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Tools: CyberChef, Detect It Easy, Splunk, x64dbg, IDA, Ghidra, Windows Event Viewer, CFF Explorer, HexEditor, jq, UPX, AWS-CLI, Sysmon, Python, PowerShell, Azure AD Sign-in Logs.

Difficulty: hard.