Join for Free

3r41nd34d

Has successfully completed 🎉

PwnedDC Lab

A corporate domain controller has been compromised, and attackers gained control over Active Directory. As a SOC analyst, investigate to uncover who was behind the attack, what happened, when and how it occurred, and why. Instructions: Use Win2016x64_14393 profile with volatility2 to analyze the memory dump

Read More
Endpoint Forensics Endpoint Forensics
hard

Dec 14, 2022

Tactics
Initial Access Execution Persistence Privilege Escalation Defense Evasion Discovery Command and Control Impact
Tools
Volatility 2 Volatility 3 Arsenal Image Mounter IDA Capa-Explorer TurnedOnTimesView FullEventLogView MFTECmd USB Forensic Tracker WinDbg Outlook Forensics Wizard FakeNet Oletools Wireshark scdbg Resource Hacker mimikatz Event Log Explorer Registry Explorer String