Hunt Conti with Splunk
An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.
- from
- Cyber Security University
- added
- 2026-10-10
- likes
- 0
similar
-
Investigating Windows tryhackme.com
A windows machine has been hacked, its your job to go investigate this windows machine and find clues to what the hacker might have done.
-
Splunk Security Content github.com
Splunk's open-source and frequently updated detection content that can be tweaked for use in other tools.
-
Anthem tryhackme.com
Exploit a Windows machine in this beginner-level challenge.
-
ES Home Page splunk.com
Splunk's Home Page for Enterprise Security.
-
Borderlands tryhackme.com
Compromise a perimeter host and pivot through this network.
-
Red Team Recon tryhackme.com
Learn how to use DNS, advanced searching, Recon-ng, and Maltego to collect information about your target.
Cyber Security University › Free Beginner Blue Team Path > Level 2 - Security Operations, Incident Response & Threat Hunting: “An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.”