Shadow Token Symphony - APT29 Lab

Synthesize KQL findings across Windows events and Azure logs to reconstruct an APT29 multi-stage cloud attack, identifying persistence mechanisms and data exfiltration.

Category:

Cloud Forensics

Tactics:

Initial Access Execution Persistence Privilege Escalation Stealth Credential Access Discovery Lateral Movement

Tool:

Microsoft Sentinel

medium

2hrs 30mins

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!