REvil - GOLD SOUTHFIELD Lab

Analyze Sysmon logs in Elastic SIEM to investigate REvil ransomware attack behaviors, decode recovery sabotage commands, and identify IOCs including the C2 onion domain.

Category:

Tactics:

Execution Privilege Escalation Stealth Discovery

Tools:

Splunk ELK OSINT

easy

Walkthrough Available

1hr 15mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!