ClawHavoc

ClawHavoc is a blue team lab that falls under the Malware Analysis category and will cover the following subjects: CyberChef, Sysmon, jq, UPX, Python, Detect It Easy, Splunk, PowerShell, x64dbg, IDA, Ghidra, Windows Event Viewer, Azure AD Sign-in Logs, CFF Explorer, AWS-CLI, HexEditor, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Categories: Malware Analysis.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Impact.

Tools: CyberChef, Sysmon, jq, UPX, Python, Detect It Easy, Splunk, PowerShell, x64dbg, IDA, Ghidra, Windows Event Viewer, Azure AD Sign-in Logs, CFF Explorer, AWS-CLI, HexEditor.

Difficulty: hard.