Browse › Rootkits & Threat Detection
Detect Unauthorized Changes by Comparing to Approved Configurations
Part of Rootkits & Threat Detection Topic: Blue Team
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Students will use a variety of tools to record and snapshot different aspects of a Windows workstation, and then compare those recent state updates to approved configurations.
- The goal is to have them learn to detect and recognize unauthorized changes or deviations to this workstation.
- ⏱ About 2 h
Scored lab. A scored lab checks your work and records a score you can see on the lab page.
Roadmaps that use this lab
- SOC Analyst — career path — step 5: SIEM and EDR
