TheTruth

TheTruth is a blue team lab that falls under the Endpoint Forensics category and will cover the following subjects: Autopsy, JADX, Strings, DB Browser for SQLite.

Learning Objectives

Reconstruct an Android attack timeline using forensic artifacts to identify RatMilad malware, extract its C2, and attribute a fraudulent transaction.

Categories: Endpoint Forensics.

Tools: Autopsy, JADX, Strings, DB Browser for SQLite.

Difficulty: medium.