CursorJack

CursorJack is a blue team lab that falls under the Endpoint Forensics, Cloud Forensics categories and will cover the following subjects: DB Browser for SQLite, Notepad++, Google Search, TrailInspector, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Collection, Impact.

Learning Objectives

A developer's workstation is the new perimeter — trace an MCP-based intrusion from the first malicious deeplink through to a multi-region cloud compromise and follow the money on-chain.

Categories: Endpoint Forensics, Cloud Forensics.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Collection, Impact.

Tools: DB Browser for SQLite, Notepad++, Google Search, TrailInspector.

Difficulty: easy.