NetX-Support - TA569 Lab

Analyze browser, filesystem, and event artifacts to reconstruct the attack chain, identify the malicious download source, extract second-stage and C2 indicators, and determine persistence, account creation, and lateral movement.

Category:

Endpoint Forensics

Tactics:

Initial Access Execution Persistence Privilege Escalation Lateral Movement Command and Control

Tools:

Event Log Explorer Eric Zimmerman Tools FTK Imager Chainsaw Registry Explorer NTFS Log Tracker Timeline Explorer

medium

Walkthrough Available

2hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!