Threat Hunting for Ransomware Attacks

Ransomware is a type of malicious software that infects computer systems, encrypts users' data, and demands a ransom in exchange for restoring access to the data. These attacks are typically carried out using social engineering techniques or by exploiting security vulnerabilities. Ransomware encrypts critical files on the target system and demands a specific amount of cryptocurrency, usually Bitcoin, in exchange for providing the decryption key.

1. 1Lessons5 lessons

   1. 1.1IntroductionPreview5 min
   2. 1.2Ransomware Attack Lifecycle5 min
   3. 1.3Threat Hunting Techniques for Ransomware5 min
   4. 1.4Abnormal File Changes and Process Activity5 min
   5. 1.5Practical Lab5 min