New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, you will learn about a variety of anti-forensic techniques that attackers might potentially use against your network.
Use meterpreter to create files, modify file timestamps, and clear Windows® event logs
Use meterpreter to impersonate an administrator, plant false evidence in Windows event logs, and remotely reboot a Windows system
Hide files by using New Technology File System (NTFS) alternate data streams (ADS)
Note: Once you begin a challenge you will not be able to pause, save, or return to your progress. Please ensure you have set aside enough time to complete the challenge before you start.
