QBot

QBot is a blue team lab that falls under the Endpoint Forensics category and will cover the following subjects: Volatility 3.

Learning Objectives

Reconstruct the QBot malware infection timeline by analyzing memory dumps, identifying malicious processes, files, and network communications using Volatility3 and VirusTotal.

Categories: Endpoint Forensics.

Tools: Volatility 3.

Difficulty: medium.