This exercise will focus on endpoint investigation, aiming at empowering your Windows forensics skills. Through this exercise, you will learn how to use Windows logs to detect, investigate, and extract meaningful insights about an attack.
As part of this exercise, you will be asked to carefully investigate a Windows machine, identifying all traces left by the attacker – from the infiltration to persistency and the damage caused to the organization.
This exercise will focus on endpoint investigation, aiming at empowering your Windows forensics skills. Through this exercise, you will learn how to use Windows logs to detect, investigate, and extract meaningful insights about an attack.
As part of this exercise, you will be asked to carefully investigate a Windows machine, identifying all traces left by the attacker – from the infiltration to persistency and the damage caused to the organization.
