Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Browser LabLD-CYBERCHEF-LAB-001Easy
Browser LabLD-CYBERCHEF-LAB-001Easy14 min

Decode the Evidence

A suspicious log field holds an encoded value. Identify the encoding, read the decoded indicator, and prepare it for the report — safely.

What you will be able to do

  • Identify a Base64 encoding by its alphabet.
  • Extract and defang the decoded indicator.
IOC AnalysisAnalyst ReportingT1132.001Standard Encoding

Sign in to start this lab.

Sign in