Trigona Ransomware - Water Ungaw

Trigona Ransomware - Water Ungaw is a blue team lab that falls under the Endpoint Forensics category and will cover the following subjects: Event Log Explorer, Event Viewer, CyberChef, NTFS Log Tracker, EZ Tools, KAPE, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Impact.

Learning Objectives

Learn to investigate ransomware attacks by analyzing logs, registry entries, and artifacts to trace attacker actions, tools used, and identify indicators of compromise.

Categories: Endpoint Forensics.

MITRE ATT&CK Tactics: Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Impact.

Tools: EZ Tools, Event Log Explorer, KAPE, Event Viewer, NTFS Log Tracker, CyberChef.

Difficulty: medium.