Cyber Defenders - Obfuscated

Have you wondered how to use CMD Watcher and Oledump to analyze an obfuscated Macro Maldoc? In this video, I will walk you through the challenge Obfuscated from Cyber Defenders.

Author Twitter: @jstrosch

cyberdefenders.org, a practical free platform designed for blue teamers to sharpen their skills:

Challenges (more than 40 are free)
Training paths (some are paid, most are free)

Check the challenge out at:
https://cyberdefenders.org/labs/76

Scenario:
During your shift as a SOC analyst, the enterprise EDR alerted a suspicious behavior from an end-user machine. The user indicated that he received a recent email with a DOC file from an unknown sender and passed the document for you to analyze.

Tools:
1. CMD Watcher (https://www.kahusecurity.com/posts/cm...)

2. Oledump (https://blog.didierstevens.com/progra...)