Bronze I
Community ManagerHi Palaract - welcome to the Human Connection 👋
Demonstrate Labs are technically challenging labs that offer very limited information and guidance, they are supposed to be challenging and consolidate your learning from all of the other labs in the collection (in this case, the other 10 labs in the APT29: Threat Hunting with Elasticsearch Collection).
As a result, the level of detail of the hints and tips that the community are able to share here is limited.
If you haven't already, I recommend that you complete all of the labs in the collection, and if it's been a while since you did, you might want to refresh your memory.
With that said, I can see that RobN was the most recent community member to complete the lab, maybe they can give you a hint 😉
