LAB 645 – Response: Detecting Malware in the Registry Run Keys (NEW)

Course Overview

Learn how attackers pivot through your network and how to stop them in their tracks. This lab focuses on spotting lateral movement across systems using tools like PsExec and remote services.

After completing this lab, learners will have the knowledge and skill to:

• Detect lateral movement techniques (T1021, T1563)
• Analyze remote access, SMB activity, and WMI events
• Map activity to MITRE ATT&CK’s lateral movement tactics
• Design response strategies to contain lateral spread