ink
sec
.io
☕
enjoying the writeups? buy me a coffee
← blue team
// CyberDefenders · writeup
Ancientland Breach - LockBit
CyberDefenders
Hard
hayabusa
CyberChef
VirusTotal
Wireshark
IDA
MFTECmd
Timeline Explorer
Volatility 3
Impacket
← all labs
challenge page →
proof of completion →
🔒
// active lab
writeup locked
encrypted per platform guidelines · password available to recruiters on request
Multi-host DFIR investigation tracing a ransomware operator from a brute-forced VPN gateway through a firewall RCE and blockchain-resolved C2 to domain-wide encryption.
decrypt
// incorrect password
enjoying the writeups?
☕ buy me a coffee
ESC ✕
scroll = zoom · drag = pan · double-click = toggle · esc = close