// active leaderboard tracking
COMPETITIVE RANKINGS
blueteamlabs.online · cyberdefenders.org — snapshots taken after each new lab release
BTLO blueteamlabs.online — active leaderboard, new lab ~every 2 weeks
First real mac endpoing investigation, big lesson for me was sometimes taking 5 minutes to learn a new tool saves you alot of time in the long run. I threw UnifiedLogIterator at UnifiedLogs/ instead of the .logarchive folder inside it. Problem is it still resulted in 1M+ CSV output so it looked fine to me but I was going mad with "Unknown shared string message"
caslMy first ever "First Blood" I had been dreaming about getting one ever since I saw the leaderboard but never thought it would be possible, today it was!
https://blueteamlabs.online/achievement/share/144656/306
Hard Reverse Engineering lab, really learnt alot on this one and took me 3 full days and nudges from discord which I think without I would not of solved it.
https://www.fortinet.com/blog/threat-research/purelogs-delivery-via-pawsrunner-steganography was a huge help on this one.
Medium DFIR lab with a fantastic ending showing stealer screenshots and clipboard copy.
Medium lab but I ended up rating it Hard due to memory leak registry entry question which I don't think I would of ever solved without a hint from Pyrea.
Intense multi-layer deobfuscation challenge — full day to work through the encoding chain.
Early in the new rotating points system - working through the 15 active labs after the full retire. Building toward the cap.
CYBERDEFENDERS cyberdefenders.org — weekly new lab cadence
Struggled with this weeks lab RE is my biggest weakness I struggled to just get it done but after a fair few hours finally completed the lab, making use of IDApython really need to learn malware if I don't want to waste time each week if its an RE lab.
Struggled on this lab, they down ranked it from hard to medium after luka and traxs solved it. Took me 3 hours to complete, RE again my biggest weakness.
Didn't get blood, came 2nd but due to points claimed 1st overall on leader board, not how I wanted to be 1st (I really want that first blood) but for someone not even working in cyber security yet I'm very proud of myself
Third week in the top 3 on CCD, this week was a splunk investigation ending with some nice static malware in PEStudio and IDA
top 2 global my best result yet and 2nd week in a row as top 1 AU and I think it was because of prep work before the lab I read https://www.huntress.com/blog/w2-malvertising-to-kernel-mode-edr-kill which gave 100% understanding on the BYOVD chain.
top 3, lockbit was a pure threat intel / OSINT lab so not the greatest achievement but happy with result.
Big week, after the latest CCD lab formbook I completed all remaining active labs, roasttoroot, markshell, satisfaction, code blue, recruiter and ended grind on Maromafix Ransomhub. Gained 11th global 2nd au new lab for CCD comes out in 2 days. Very happy with the result! o7
My First Hard rated lab on CCD completed this week with the release of Formbook, I was 5th to finish it within and was able to complete the lab within 2.5 hours of it releasing which I was happy with considering it was tagged 4 hours. 50 points banked!
new hard lab released, haven't had chance to complete it yet as I'm still working on mediums.
