LockBit Lab

Reconstruct a multi-system LockBit ransomware attack chain by correlating Windows event logs, registry artifacts, and PowerShell activity to identify TTPs.

Category:

Endpoint Forensics

Tactics:

Execution Persistence Privilege Escalation Defense Impairment Credential Access Lateral Movement Impact

Tools:

KAPE EZ Tools Event Log Explorer Event Viewer CyberChef

medium

Walkthrough Available

1hr 30mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!