ContainerBreak - Rootkit Trail

ContainerBreak - Rootkit Trail is a blue team lab that falls under the Endpoint Forensics category and will cover the following subjects: Linux Command Line Tools, Execution, Persistence, Privilege Escalation, Defense Evasion, Command and Control.

Categories: Endpoint Forensics.

MITRE ATT&CK Tactics: Execution, Persistence, Privilege Escalation, Defense Evasion, Command and Control.

Tools: Linux Command Line Tools.

Difficulty: easy.