GhostConnect - TA583 Lab

Hunt Sysmon process trees, Chrome browsing artifacts, and Mark-of-the-Web streams to rebuild a the full kill chain from phishing delivery through AD enumeration to HTTPS exfiltration.

Category:

Tactics:

Initial Access Execution Discovery Collection

Tools:

VirusTotal Splunk

easy

Walkthrough Available

1hr 30mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!