WeDoPlants Lab 002: Windows – Registry Run key/Task Scheduler

To see Lab setup, click here. Planting “clues”: I’m practicing how to find evidence of persistence using Windows built-in tools, logs, and cmd commands. Clues to plant: sus Scheduled Task sus Run registry key (Planning to add more clues, that are more interesting) Clue 1: Sus Scheduled task Create persistence that looks shady but doesn’t … Read more

Categories Lab

WeDoPlants Lab 001: Lab setup and preparations

Purpose: Create a persistent simulation lab environment. It will expand and grow, like a real small company might, introducing new opportunities for practice. Practice settings up a virtual machine in VMWare Learning setup settings, VM version control (snapshots) Practice Windows user account setup, system settings, command prompt commands Learn lab setup and preparation step Practice … Read more

Categories Lab