Crossed Signals Lab

A routine security audit. A trusted messaging app. By the time the victim realized something was wrong, the damage was already done. Can you trace what happened? Investigate a Windows compromise through browser, registry, event-log and file-system artifacts, then recover encrypted Signal messages using DPAPI and SQLCipher.

Category:

Endpoint Forensics

Tactics:

Initial Access Persistence Privilege Escalation Stealth Discovery Collection Command and Control

Tools:

RegRipper DB Browser for SQLCipher DB Browser for SQLite VirusTotal mimikatz MFTECmd Timeline Explorer JLECmd hayabusa

medium

2hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!