Recruiter - Hanoi Op is a blue team lab that falls under the Endpoint Forensics category and will cover the following subjects: Eric Zimmerman Tools, PECmd, Registry Explorer, MFTECmd, Timeline Explorer, EvtxECmd, DB Browser for SQLite, Execution, Stealth, Credential Access.
When a "candidate" submits a resume that’s more than it seems, it’s up to you to hunt through the artifacts, reconstruct the infection chain, and stop a data breach in its tracks.
Categories: Endpoint Forensics.
MITRE ATT&CK Tactics: Execution, Stealth, Credential Access.
Tools: Eric Zimmerman Tools, PECmd, Registry Explorer, MFTECmd, Timeline Explorer, EvtxECmd, DB Browser for SQLite.
Difficulty: hard.