Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Browser LabLD-TI-LAB-003Hard
Browser LabLD-TI-LAB-003Hard32 min

Profile the Adversary

A confirmed intrusion set targets Sahab. Build an adversary profile: map the behavior to ATT&CK, pivot the shared infrastructure with the Diamond Model to find related activity, and prioritize what to deliver using the Pyramid of Pain.

What you will be able to do

  • Map observed behavior to ATT&CK techniques.
  • Pivot shared infrastructure to related victims.
  • Prioritize deliverables by the Pyramid of Pain.
Threat IntelligenceNetwork AnalysisIOC AnalysisT1566PhishingT1059.001PowerShellT1071Application Layer Protocol

Sign in to start this lab.

Sign in