Zoom Incident - Ignoble Scorpius APT Lab

Correlate Sysmon events and forensic artifacts across multiple hosts using Splunk to reconstruct a full ransomware kill chain, from initial compromise to domain-wide impact.

Category:

Tactics:

Initial Access Execution Privilege Escalation Stealth Credential Access Lateral Movement Command and Control Exfiltration Impact

Tools:

Splunk VirusTotal CyberChef

hard

Walkthrough Available

3hrs

Sign in to Download Lab Files

Unlock Your Full Learning Experience with CyberRange Labs

Sign up to track your progress, unlock exclusive labs, and showcase your achievements—begin your journey now!