Famous Chollima Lab

Synthesize forensic artifacts and Python source code from a disk image to reconstruct a credential theft attack, identifying persistence methods and C2 communications.

Category:

Endpoint Forensics

Tactics:

Persistence Privilege Escalation Stealth Discovery Collection Exfiltration

Tools:

Eric Zimmerman Tools Event Log Explorer FTK Imager Registry Explorer MFTECmd Timeline Explorer

medium

Walkthrough Available

2hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!