1 1

NetSupport Intrusion Results in Domain Compromise - Public Case #19438

NetSupport Intrusion Results in Domain Compromise - Public Case #19438

$19.99 USD
$19.99 USD
Sale Sold out
Medium
Access Time - Starts After Checkout

This lab is based on the public report "NetSupport Intrusion Results in Domain Compromise".

To read more about DFIR Labs click here.

Your access time starts at purchase time. You will receive an email within 5 minutes of purchase with instructions on how to connect to the lab. Enjoy!

Disclaimer

All information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.

View full details

Customer Reviews

Based on 1 review
100%
(1)
0%
(0)
0%
(0)
0%
(0)
0%
(0)
R
Ralph
Best way to learn from the thedfirreport

I've been reading thedfirreport for long while and have had access to the artifacts of other cases before investigating this one. Had a blast doing this case and I can highly recommend it to anyone interested in the blue side of the house.

You will have the opportunity to investigate a case with all the logs you'd ever want without the time pressure of an ongoing incident. Having so many quality logs available gave me the opportunity to correlate between log sources I normally don't have access to and learn some cool new tricks and gain a better understanding of the CTI report. It really is hands on learning in the most fun way possible.

The quiz available did a good job of guiding me through the investigation, but you can continue investigating afterwards and trying to find the same answers without using the standard log sources available in most investigations.