Open note Incident Response Lab: Triaging an Intentionally Dropped Malware Sample on an Isolated Windows VM
Controlled IR lab — intentionally executed a lab malware sample on an isolated Windows 10 VM: isolated host, captured memory & logs, traced persistence via MITRE ATT&CK, eradicated, and delivered a 1-page executive …
