{"title":"DFIR Labs","description":"\u003cp data-mce-fragment=\"1\"\u003e\u003cstrong data-mce-fragment=\"1\"\u003eExplore Real-World Cybersecurity Intrusions with Our Interactive DFIR Labs\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp data-mce-fragment=\"1\"\u003eOur cloud-based DFIR (Digital Forensics and Incident Response) Labs offer a hands-on learning experience, using\u003cspan data-mce-fragment=\"1\"\u003e \u003c\/span\u003e\u003cstrong data-mce-fragment=\"1\"\u003ereal\u003c\/strong\u003e\u003cspan data-mce-fragment=\"1\"\u003e \u003c\/span\u003edata from\u003cspan data-mce-fragment=\"1\"\u003e \u003c\/span\u003e\u003cstrong data-mce-fragment=\"1\"\u003ereal\u003c\/strong\u003e\u003cspan data-mce-fragment=\"1\"\u003e \u003c\/span\u003eintrusions.\u003c\/p\u003e\n\u003cp data-mce-fragment=\"1\"\u003eIf you are a business or organization and would like to purchase in bulk at a discount, please see \u003ca href=\"https:\/\/the-dfir-report-store.myshopify.com\/collections\/dfir-labs-business-options\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cp data-mce-fragment=\"1\"\u003eLearn more about DFIR Labs \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" data-mce-href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e. Check out the Leaderboard \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/dfir-labs-leaderboard\/\" data-mce-href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/dfir-labs-leaderboard\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e. Need help? Contact training@thedfirreport.com\u003cbr\u003e\u003c\/p\u003e","products":[{"product_id":"case-19208","title":"BlueSky Ransomware - Public Case #19208","description":"\u003cp\u003eThis DFIR Lab is based on the public case \"\u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/2023\/12\/04\/sql-brute-force-leads-to-bluesky-ransomware\/\" target=\"_blank\"\u003eSQL Brute Force Leads to BlueSky Ransomware\u003c\/a\u003e.\"\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":47698991251750,"sku":"","price":16.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49277330850086,"sku":"","price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":48804967711014,"sku":"","price":17.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49277330882854,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":47698991284518,"sku":"","price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49277330915622,"sku":"","price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":48804967743782,"sku":"","price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49277330948390,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":47741377708326,"sku":"","price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49277330981158,"sku":"","price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":48804967776550,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49277331013926,"sku":"","price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/b2.webp?v=1709928672"},{"product_id":"case-19438","title":"NetSupport Intrusion Results in Domain Compromise - Public Case #19438","description":"\u003cp\u003eThis lab is based on the public report \"\u003ca href=\"https:\/\/thedfirreport.com\/2023\/10\/30\/netsupport-intrusion-results-in-domain-compromise\/\" target=\"_blank\"\u003eNetSupport Intrusion Results in Domain Compromise\u003c\/a\u003e\".\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":47698991382822,"sku":"","price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278435885350,"sku":"","price":109.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":47698991415590,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278435918118,"sku":"","price":149.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":47741078929702,"sku":"","price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278435950886,"sku":"","price":199.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/netsupport.webp?v=1711893232"},{"product_id":"case-23825","title":"Dagon Locker Ransomware - Private Case #23825","description":"\u003cp\u003eThis lab is based on a Private Threat Brief that starts with IcedID and ends in Dagon Locker Ransomware.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":47698991481126,"sku":"","price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278249632038,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":48849635344678,"sku":"","price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49278249664806,"sku":"","price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":47698991513894,"sku":"","price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278249697574,"sku":"","price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":48849635377446,"sku":"","price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49278249730342,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":47698991546662,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278249763110,"sku":"","price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":48849635410214,"sku":"","price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49278249795878,"sku":"","price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/b3e314ed-b0d8-4550-8476-1a61dbc3ca3d.webp?v=1711975235"},{"product_id":"qakbot-leads-to-cobalt-strike-and-domain-compromise-private-case-27101","title":"Qbot Leads to Domain Compromise - Private Case #27101","description":"\u003cp\u003eThis case is based on a Private Threat Brief. You'll get to investigate a domain-wide compromise involving a multi-day intrusion that started with a Qbot infection.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":48508140421414,"sku":"","price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278438801702,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":48847481831718,"sku":"","price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49278438834470,"sku":"","price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":48508140454182,"sku":"","price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278438867238,"sku":"","price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":48847481864486,"sku":"","price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49278438900006,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":48508140486950,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278438932774,"sku":"","price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":48847481897254,"sku":"","price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49278438965542,"sku":"","price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/image_1.png?v=1715176560"},{"product_id":"new-a-truly-graceful-wipe-out-public-case-21619","title":"A Truly Graceful Wipe Out - Public Case #21619","description":"\u003cp\u003eThis case is based on the public report \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/2023\/06\/12\/a-truly-graceful-wipe-out\/\" data-mce-href=\"https:\/\/thedfirreport.com\/2023\/06\/12\/a-truly-graceful-wipe-out\/\" target=\"_blank\"\u003eA Truly Graceful Wipe Out\u003c\/a\u003e. You will investigate a domain-wide compromise that included multiple phases of the intrusion, starting with a Truebot malware infection.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" data-mce-href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cp\u003eThis lab is based on a Private Threat Brief and includes a multi-day intrusion that starts with a phishing vector for the initial access via malware and Remote Access Tools.\u003c\/p\u003e\n\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":48701032464678,"sku":null,"price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278238327078,"sku":"","price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":49062562038054,"sku":"","price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49278238359846,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":48701032497446,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278238392614,"sku":"","price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":49062562070822,"sku":"","price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49278238425382,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":48701032530214,"sku":null,"price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278238458150,"sku":"","price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":49062562103590,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49278238490918,"sku":"","price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/image_1_f63e30d9-bd95-4ac9-bd7b-934e2ca768b7.png?v=1716981767"},{"product_id":"icedid-brings-screenconnect-and-csharp-streamer-to-alphv-ransomware-deployment-public-case-24952","title":"ALPHV Ransomware - Public Case #24952","description":"\u003cp\u003eThis case is based on an advanced, multi-stage intrusion that began in October 2023. You will be examining an intrusion that progressed through all stages and resulted in the deployment of ransomware.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":48789455733030,"sku":null,"price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278244258086,"sku":"","price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":48805021974822,"sku":"","price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49278244290854,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":48789455765798,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278244323622,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":48805022007590,"sku":"","price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49278244356390,"sku":"","price":149.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":48789455798566,"sku":null,"price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278244389158,"sku":"","price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":48805022040358,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49278244421926,"sku":"","price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/1.png?v=1717973396"},{"product_id":"confluence-exploit-leads-to-lockbit-ransomware-private-case-27244","title":"LockBit Ransomware - Public Case #27244","description":"\u003cp\u003eThis case is based on a Public Case. In February 2024, a Windows Confluence server was compromised, leading to a rapid, domain-wide intrusion. You will analyze how attackers used AnyDesk and Metasploit to escalate privileges and ultimately deployed ransomware within hours.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener noreferrer\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":49193822486822,"sku":"","price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49278429102374,"sku":"","price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":49193822519590,"sku":"","price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49278429135142,"sku":"","price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":49193822552358,"sku":"","price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49278429167910,"sku":"","price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":49193822585126,"sku":"","price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49278429200678,"sku":"","price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":49193822617894,"sku":"","price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49278429233446,"sku":"","price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":49193822650662,"sku":"","price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49278429266214,"sku":"","price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/Image.jpg?v=1720624176"},{"product_id":"lockbit-ransomware-private-case-27138","title":"Backdoors and LockBit - Private Case #27138","description":"\u003cp class=\"p1\"\u003e\u003cspan class=\"s1\"\u003eThis case involves a sophisticated intrusion that began with the execution of a malicious file and a multi-day intrusion that ended in LockBit Ransomware.\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":49486280163622,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49486280196390,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":49486280229158,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49486280261926,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":49486280294694,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49486280327462,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":49486280360230,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49486280392998,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":49486280425766,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49486280458534,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":49486280491302,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49486280524070,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true},{"title":"2 hours \/ Elastic \/ Personal","offer_id":49702872056102,"sku":null,"price":19.99,"currency_code":"USD","in_stock":false},{"title":"2 hours \/ Elastic \/ Business\/Organization","offer_id":49702872088870,"sku":null,"price":19.99,"currency_code":"USD","in_stock":false},{"title":"2 hours \/ Splunk \/ Personal","offer_id":49702872121638,"sku":null,"price":19.99,"currency_code":"USD","in_stock":false},{"title":"2 hours \/ Splunk \/ Business\/Organization","offer_id":49702872154406,"sku":null,"price":19.99,"currency_code":"USD","in_stock":false}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/27138_2_58888a7f-6e45-4520-a850-fe91c8b01fcc.png?v=1726035408"},{"product_id":"blacksuit-ransomware-private-case-29354","title":"BlackSuit Ransomware - Public Case #29354","description":"\u003cp\u003e\u003cmeta charset=\"utf-8\"\u003e\u003cspan data-teams=\"true\"\u003e\u003cspan class=\"ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak\" dir=\"ltr\"\u003eThis lab is based on a \u003ca href=\"https:\/\/thedfirreport.com\/2025\/03\/31\/fake-zoom-ends-in-blacksuit-ransomware\/\" target=\"_blank\" rel=\"noopener\"\u003ePublic Report\u003c\/a\u003e that starts with a phishing vector for the initial access via malware and ends in \u003cstrong\u003eBlacksuit Ransomware.\u003c\/strong\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":49486347338022,"sku":null,"price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49486347370790,"sku":null,"price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":49486347403558,"sku":null,"price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49486347436326,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":49486347469094,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49486347534630,"sku":null,"price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":49486347567398,"sku":null,"price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49486347600166,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":49486347632934,"sku":null,"price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49486347665702,"sku":null,"price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":49486347698470,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49486347731238,"sku":null,"price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/29354_3.png?v=1726035527"},{"product_id":"alpaca-ransomware-private-case-30043","title":"Elpaco-Team Ransomware - Public Case #30043","description":"\u003cp\u003e\u003cmeta charset=\"utf-8\"\u003e\u003cspan data-teams=\"true\"\u003e\u003cspan class=\"ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak\" dir=\"ltr\"\u003eThis lab is based on a Public Report that starts with a phishing vector for the initial access via malware and ends in \u003cstrong\u003eElpaco-Team Ransomware.\u003c\/strong\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":49871906406694,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":49871906439462,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":49871906472230,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":49871906504998,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":49871906537766,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":49871906570534,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":49871906603302,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":49871906636070,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":49871906668838,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":49871906701606,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":49871906734374,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":49871906767142,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/elpaco_dfirLab.webp?v=1733434977"},{"product_id":"mud-in-the-water-private-case-29823","title":"Mud In The Water - Private Case #29823","description":"\u003cp\u003eThis lab is based on a Private Threat Brief and includes a multi-day intrusion that starts with a phishing vector for the initial access via malware and Remote Access Tools.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":50210016100646,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":50210016133414,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":50210016166182,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":50210016198950,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":50210016231718,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":50210016264486,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":50210016297254,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":50210016330022,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":50210016362790,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":50210016395558,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":50210016428326,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":50210016461094,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/29823-shopify.png?v=1740941334"},{"product_id":"ransomhub-leads-to-domain-compromise-33490","title":"RansomHub Leads to Domain Compromise – Public Case #33490","description":"\u003cp class=\"p1\"\u003eThis case is based on a Private Threat Brief. You’ll get to investigate a domain-wide compromise involving a multi-stage intrusion that started with a password spraying attack. The threat actor established persistence, performed reconnaissance, exfiltrated data, and ultimately deployed RansomHub ransomware to disrupt operations.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n  \u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n  \u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n    \u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eSelf-funded learning\u003c\/li\u003e\n        \u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n        \u003cli\u003eNo organizational benefit\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n    \u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n      \u003cdiv class=\"flex items-center mb-2\"\u003e\n        \u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e\n          \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e\n        \u003c\/span\u003e\n        \u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n      \u003c\/div\u003e\n      \u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n      \u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n        \u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n        \u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n        \u003cli\u003eEducational institutions\u003c\/li\u003e\n        \u003cli\u003eTeam learning activities\u003c\/li\u003e\n      \u003c\/ul\u003e\n    \u003c\/div\u003e\n  \u003c\/div\u003e\n  \u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n    \u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n  \u003c\/div\u003e\n\u003c\/div\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":50637225951526,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":50637225984294,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":50637226017062,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":50637226049830,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":50637226082598,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":50637226115366,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":50637226148134,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":50637226180902,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":50637226213670,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":50637226246438,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":50637226279206,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":50637226311974,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/33490-lab-image.png?v=1749156753"},{"product_id":"the-hive-ransomware-fail-public-case-18364","title":"The Hive Ransomware Fail - Public Case #18364","description":"\u003cp\u003eThis case is based on the public report \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/2023\/09\/25\/from-screenconnect-to-hive-ransomware-in-61-hours\/\" target=\"_blank\"\u003eFrom ScreenConnect to Hive Ransomware in 61 hours\u003c\/a\u003e. You will investigate a domain-wide compromise that progressed through multiple stages, beginning with the abuse of cloud-hosted Remote Monitoring and Management (RMM) tools and culminating in the deployment of Hive ransomware.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003cbr\u003e\u003cbr\u003e\u003cmeta charset=\"utf-8\"\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003cbr\u003e\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":50701833830694,"sku":null,"price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":50701833863462,"sku":null,"price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":50701833896230,"sku":null,"price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":50701833928998,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":50701833961766,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":50701833994534,"sku":null,"price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":50701834027302,"sku":null,"price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":50701834060070,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":50701834092838,"sku":null,"price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":50701834125606,"sku":null,"price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":50701834158374,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":50701834191142,"sku":null,"price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/hive_18543.png?v=1750964806"},{"product_id":"the-nokoyawa-ransomware-intrusion-public-case-18543","title":"The Nokoyawa Ransomware Intrusion - Public Case #18543","description":"\u003cp\u003eThis case is based on the public report \u003ca href=\"https:\/\/thedfirreport.com\/2023\/08\/28\/html-smuggling-leads-to-domain-wide-ransomware\/\"\u003eHTML Smuggling Leads to Domain Wide Ransomware\u003c\/a\u003e. You will investigate a fast-moving intrusion that began with HTML smuggling and the delivery of IcedID malware, leading to Cobalt Strike deployment and ending in Nokoyawa ransomware—all within just 12 hours.\u003cbr\u003e\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003cbr\u003e\u003cbr\u003e\u003cmeta charset=\"utf-8\"\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003cbr\u003e\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":50702051410214,"sku":null,"price":19.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":50702051442982,"sku":null,"price":109.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":50702051475750,"sku":null,"price":21.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":50702051508518,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":50702051541286,"sku":null,"price":45.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":50702051574054,"sku":null,"price":149.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":50702051606822,"sku":null,"price":49.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":50702051639590,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":50702051672358,"sku":null,"price":79.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":50702051705126,"sku":null,"price":199.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":50702051737894,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":50702051770662,"sku":null,"price":219.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/18364_shopify.png?v=1750968520"},{"product_id":"specters-domain-heist-private-case-35218","title":"Specter's Domain Heist - Private Case #35218","description":"\u003cp\u003eThis intrusion began with the compromise of a workstation, resulting in persistent access, network reconnaissance, privilege escalation, lateral movement, and data exfiltration. The threat actor used the Spectre Insight framework as their primary C2 channel.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":51047801913638,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":51047801946406,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":51047801979174,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":51047802011942,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":51047802044710,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":51047802077478,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":51047802110246,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":51047802143014,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":51047802175782,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":51047802208550,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":51047802241318,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":51047802274086,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/Gemini_Generated_Image_qwym7iqwym7iqwym.png?v=1756743277"},{"product_id":"latrodectus-malware-leads-to-exfiltration-public-case-28761","title":"The Lunar Tangled Malware Web - Public Case #28761","description":"\u003cp class=\"p1\"\u003eThis case is based on a publicly released case. \u003cspan class=\"s1\"\u003eYou’ll get to investigate a domain-wide compromise involving a multi-stage intrusion that began when a user executed a malicious file disguised as a tax-related document. The attacker deployed several implants, performed extensive discovery, moved laterally to critical servers, harvested credentials from system memory and application databases, and ultimately exfiltrated a large volume of data from internal file shares.\u003c\/span\u003e\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" rel=\"noopener\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":51074706014502,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":51074706047270,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":51074706080038,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":51074706112806,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":51074706145574,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":51074706178342,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":51074706211110,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":51074706243878,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":51074706276646,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":51074706309414,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":51074706342182,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":51074706374950,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/ddc8720f-249e-4e46-b8cb-a77c279a90a1.png?v=1757463129"},{"product_id":"35646","title":"ClickFix leads to RomComRAT Domain Compromise - Private Case #35646","description":"\u003cp class=\"p1\"\u003eThis case is based on a Private Threat Brief detailing a nine-day espionage operation. You’ll get to investigate a domain-wide compromise involving a multi-stage intrusion that began when a user fell victim to a deceptive fake CAPTCHA lure. Leveraging custom RomComRAT implants to gain a foothold, the attacker moved stealthily through the network, harvested sensitive credentials from critical systems, and executed a massive data exfiltration campaign.\u003c\/p\u003e\n\u003cp\u003eTo read more about DFIR Labs click \u003ca rel=\"noopener\" href=\"https:\/\/thedfirreport.com\/services\/dfir-labs\/\" target=\"_blank\"\u003ehere\u003c\/a\u003e.\u003c\/p\u003e\n\u003cdiv class=\"license-type-notice p-4 mb-4 bg-blue-50 border-l-4 border-blue-500 rounded-md\"\u003e\n\u003ch4 class=\"font-bold text-gray-900 mb-2\"\u003eImportant: Choose the Correct License Type\u003c\/h4\u003e\n\u003cdiv class=\"grid grid-cols-1 md:grid-cols-2 gap-4 mb-3\"\u003e\n\u003cdiv class=\"p-3 bg-white border border-gray-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-blue-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-user text-blue-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003ePersonal License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003eFor individuals paying out of their own pocket for personal skill development only.\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eSelf-funded learning\u003c\/li\u003e\n\u003cli\u003ePersonal skill improvement\u003c\/li\u003e\n\u003cli\u003eNo organizational benefit\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"p-3 bg-white border border-green-200 rounded-md\"\u003e\n\u003cdiv class=\"flex items-center mb-2\"\u003e\n\u003cspan class=\"w-8 h-8 bg-green-100 rounded-full flex items-center justify-center mr-2\"\u003e \u003ci class=\"fas fa-building text-green-500\"\u003e\u003c\/i\u003e \u003c\/span\u003e\n\u003ch5 class=\"font-semibold\"\u003eEnterprise License\u003c\/h5\u003e\n\u003c\/div\u003e\n\u003cp class=\"text-sm text-gray-600\"\u003e\u003cstrong\u003eRequired\u003c\/strong\u003e if any organization benefits from your use, including:\u003c\/p\u003e\n\u003cul class=\"text-sm text-gray-600 mt-2 list-disc list-inside\"\u003e\n\u003cli\u003eCompany-sponsored training\u003c\/li\u003e\n\u003cli\u003eSkills used for work purposes\u003c\/li\u003e\n\u003cli\u003eEducational institutions\u003c\/li\u003e\n\u003cli\u003eTeam learning activities\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cdiv class=\"bg-yellow-50 p-3 rounded-md border-l-4 border-yellow-400 text-sm\"\u003e\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c\/strong\u003e If your employer is paying for this lab OR if the skills learned will benefit your employer\/organization in any way, you \u003cstrong\u003emust\u003c\/strong\u003e purchase an Enterprise license. This applies even if you're paying personally but using the skills for work.\u003c\/p\u003e\n\u003c\/div\u003e\n\u003c\/div\u003e\n\u003cp\u003e\u003cstrong\u003eYou will receive an email within 5 minutes of purchase with instructions on how to activate the lab. Buy now, use anytime within the next 3 months. Enjoy!\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eDisclaimer\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cp\u003eAll information in the DFIR Labs and analysis of that information shall be treated as TLP:RED. This classification mandates that the information is not shared publicly or privately without explicit permission from The DFIR Report.\u003c\/p\u003e\n\u003cp\u003eThe difficulty of each DFIR Lab case is inherently subjective and may vary based on the participant's individual skills and experience.\u003c\/p\u003e","brand":"My Store","offers":[{"title":"2 days \/ Elastic \/ Personal","offer_id":52846577516838,"sku":null,"price":22.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Elastic \/ Business\/Organization","offer_id":52846577549606,"sku":null,"price":119.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Personal","offer_id":52846577582374,"sku":null,"price":24.99,"currency_code":"USD","in_stock":true},{"title":"2 days \/ Splunk \/ Business\/Organization","offer_id":52846577615142,"sku":null,"price":124.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Personal","offer_id":52846577647910,"sku":null,"price":54.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Elastic \/ Business\/Organization","offer_id":52846577680678,"sku":null,"price":154.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Personal","offer_id":52846577713446,"sku":null,"price":59.99,"currency_code":"USD","in_stock":true},{"title":"7 days \/ Splunk \/ Business\/Organization","offer_id":52846577746214,"sku":null,"price":159.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Personal","offer_id":52846577778982,"sku":null,"price":89.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Elastic \/ Business\/Organization","offer_id":52846577811750,"sku":null,"price":204.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Personal","offer_id":52846577844518,"sku":null,"price":99.99,"currency_code":"USD","in_stock":true},{"title":"14 days \/ Splunk \/ Business\/Organization","offer_id":52846577877286,"sku":null,"price":214.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0824\/5225\/0918\/files\/labs-35646.png?v=1778068222"}],"url":"https:\/\/store.thedfirreport.com\/collections\/dfir-labs.oembed?page=2","provider":"The DFIR Report","version":"1.0","type":"link"}