IcedID 2 - GOLD CABIN Lab

Analyze memory artifacts and trace a ransomware attack's origin, execution, and persistence using forensic tools like Volatility 3 and MemProcFS.

Category:

Endpoint Forensics

Tactics:

Execution Persistence Privilege Escalation Discovery Lateral Movement Command and Control

Tools:

Volatility 3 MemProcFS Event Log Explorer EvtxECmd Timeline Explorer

medium

Walkthrough Available

1hr

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!