Poisoned Pipeline Lab

Investigate a multi-stage supply-chain intrusion that landed via a poisoned npm dependency and pivoted through CI/CD into production and AWS by pivoting across Splunk, disk images, and git history.

Category:

Tactics:

Resource Development Initial Access Execution Persistence Privilege Escalation Defense Impairment Credential Access Discovery Lateral Movement Collection Exfiltration

Tools:

Process Explorer Event Log Explorer Timeline Explorer GitHub Python3 PowerShell

hard

2hrs 30mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!