Job Trap - OilRig Lab

Analyze PowerShell and Sysmon logs to investigate macro-based malware, identify persistence via scheduled tasks, and extract C2 indicators and keylogger behavior using FTK Imager and olevba.

Category:

Endpoint Forensics

Tactics:

Execution Persistence Privilege Escalation Credential Access Discovery Collection

Tools:

olevba CyberChef Windows Event Viewer DB Browser for SQLite

medium

Walkthrough Available

2hrs 40mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!