Forum Discussion

bf7750's avatar
bf7750
Icon for Bronze I rankBronze I
18 days ago

APT29 Threat Hunting with Elasticsearch: Ep.5 – LNK File Analysis - Tools?

I was able to complete Ep. 1-4 without much difficulty because I have previous experience with Elasticsearch. But this lab feels like getting pushed into the deep end with no floaties.  Not only i...
help & support
jamesstammers's avatar
jamesstammers
Icon for Bronze I rankBronze I
5 days ago

Hello, 

It is quite tricky getting started with this one because of the little information you're given. HxD is a good place to start, and with a little knowledge of how to decode popular encoding methods in the CLI you should be able to figure it out!