Penumbra Lab

Synthesize diverse forensic artifacts including $MFT, USN journal, and registry hives to reconstruct an anti-forensic intrusion timeline from initial access to exfiltration.

Category:
Endpoint Forensics
Tactics:
Initial AccessExecutionPersistencePrivilege EscalationStealthDefense ImpairmentDiscoveryCollectionCommand and ControlExfiltration
Tools:
DB Browser for SQLiteRegistry Explorer/RECmdFTK ImagerAutopsyMFTECmdTimeline ExplorerEvtxECmdText EditorHexEditor
medium
Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!

Join for Free