Loki Locker Ransomware Detection & Analysis | Windows Events Logs Analysis

In this video walkthrough, we covered analyzing Windows events logs using Python-evtx and chainsaw. We started with extracting Powershell logs and from there we researched the artifacts with chainsaw to discover the initial root cause of the ransomware infection. By following the chain of spawned processes, we discovered an office document as the initial cause of the ransomware infection.
****
Receive Cyber Security Field, Certifications Notes and Special Training Videos
   / @motasemhamdan  
******
Writeup
https://motasem-notes.net/en/loki-loc...
********
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6ai...
LinkedIn
[1]:   / motasem-hamdan-7673289b  
[2]:   / motasem-eldad-ha-bb42481b2  
Instagram
  / motasem.hamdan.official  
Twitter
  / manmotasem  
Facebook
  / motasemhamdantty