Raining Dinosaurs - Storm-2603

Raining Dinosaurs - Storm-2603 is a blue team lab that falls under the Threat Hunting category and will cover the following subjects: Splunk, Initial Access, Execution, Persistence, Stealth, Lateral Movement, Collection.

Learning Objectives

Hunt through Splunk logs to uncover how attackers exploited a DMZ server, pivoted to the internal network, and deployed ransomware after exfiltrating sensitive data.

Categories: Threat Hunting.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Stealth, Lateral Movement, Collection.

Tools: Splunk.

Difficulty: hard.