Investigating Conti Ransomware on Microsoft Exchange with Splunk | TryHackMe
In this post, we investigated the Conti ransomware that hit Microsoft Exchange via a series of vulnerabilities. We used…
ransomware
Ransomware Recovery Using Shadow Volume Copy | TryHackMe Advent of Cyber
Introduction We demonstrated ransomware recovery by recovering files using the Windows Shadow Volume Copy feature. This was part of…
Investigating Ransomware with ProcDOT | TryHackMe Dunkle Materie
Introduction In this video walk-through, we covered investigating BlackMatter ransomware with ProcDOT. You can use ProcDOT to visualize processes…
Investigating Cerber Ransomware with Splunk | TryHackMe Boss of the SOC V1
Premise In this video walkthrough, we covered how to investigate the Cerber Ransomware and find its related artifacts in…