CursorJack

CursorJack is a blue team lab that falls under the Cloud Forensics, Endpoint Forensics categories and will cover the following subjects: Google Search, DB Browser for SQLite, Notepad++, TrailInspector, Initial Access, Execution, Persistence, Privilege Escalation, Stealth, Credential Access, Discovery, Collection, Impact.

Learning Objectives

A developer's workstation is the new perimeter — trace an MCP-based intrusion from the first malicious deeplink through to a multi-region cloud compromise and follow the money on-chain.

Categories: Cloud Forensics, Endpoint Forensics.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Stealth, Credential Access, Discovery, Collection, Impact.

Tools: Google Search, DB Browser for SQLite, Notepad++, TrailInspector.

Difficulty: easy.