PaloAltoRCE - UTA0218

PaloAltoRCE - UTA0218 is a blue team lab that falls under the Threat Hunting category and will cover the following subjects: ELK.

Learning Objectives

Reconstruct a Palo Alto RCE attack timeline by analyzing firewall logs in ELK, identifying initial access, reverse shell, persistence, and data exfiltration artifacts.

Categories: Threat Hunting.

Tools: ELK.

Difficulty: hard.