// active leaderboard tracking
COMPETITIVE RANKINGS
blueteamlabs.online · cyberdefenders.org — snapshots taken after each new lab release
BTLO blueteamlabs.online — active leaderboard, new lab ~every 2 weeks
5th place, stopped staying up till midnight to do these, happy to just run them on saturday morning and sit around 5th-7th.
Fun lab and has helpful public report to understand attack chain.
4th place but a real struggle with another RE lab, 100% need to try and improve my RE ability, extended lab 2 times, around 8 hours total and needed help with q25 to get it completed.
Another RE lab, struggle to get these done but proud to be 4th to complete it.
First real mac endpoing investigation, big lesson for me was sometimes taking 5 minutes to learn a new tool saves you alot of time in the long run. I threw UnifiedLogIterator at UnifiedLogs/ instead of the .logarchive folder inside it. Problem is it still resulted in 1M+ CSV output so it looked fine to me but I was going mad with "Unknown shared string message"
caslMy first ever "First Blood" I had been dreaming about getting one ever since I saw the leaderboard but never thought it would be possible, today it was!
https://blueteamlabs.online/achievement/share/144656/306
Hard Reverse Engineering lab, really learnt alot on this one and took me 3 full days and nudges from discord which I think without I would not of solved it.
https://www.fortinet.com/blog/threat-research/purelogs-delivery-via-pawsrunner-steganography was a huge help on this one.
Medium DFIR lab with a fantastic ending showing stealer screenshots and clipboard copy.
Medium lab but I ended up rating it Hard due to memory leak registry entry question which I don't think I would of ever solved without a hint from Pyrea.
Intense multi-layer deobfuscation challenge — full day to work through the encoding chain.
Early in the new rotating points system - working through the 15 active labs after the full retire. Building toward the cap.
CYBERDEFENDERS cyberdefenders.org — weekly new lab cadence
Great splunk hunting lab
Monster of a lab, full kill chain on lockbit, decrypt 3 keys to complete lab
3rd place on great lab that ended in some nice malware static analysis.
Great lab with some tricky TLS keys required to solve it. 2nd place.
my new favorite lab on CCD, finished 3rd on lab but kept 2nd overall. Really enjoyed the final part with the signal decryption.
Finished 3rd but overall 2nd proud that I cleared in within the 2h30 target which is rare for me. Was a proper end to end kill chain, every phase evidenced. Best lesson I got out of this one: when the logs contradict what you expect to see, the logs win. Believe the telemetry over your theory!
Really enjoyed this lab from elastic to ftk image with some nice new questions using redteam tools
Great lab, learnt new browser artefacts and alot of anydesk connection info.
Struggled with this weeks lab RE is my biggest weakness I struggled to just get it done but after a fair few hours finally completed the lab, making use of IDApython really need to learn malware if I don't want to waste time each week if its an RE lab.
Struggled on this lab, they down ranked it from hard to medium after luka and traxs solved it. Took me 3 hours to complete, RE again my biggest weakness.
Didn't get blood, came 2nd but due to points claimed 1st overall on leader board, not how I wanted to be 1st (I really want that first blood) but for someone not even working in cyber security yet I'm very proud of myself
Third week in the top 3 on CCD, this week was a splunk investigation ending with some nice static malware in PEStudio and IDA
top 2 global my best result yet and 2nd week in a row as top 1 AU and I think it was because of prep work before the lab I read https://www.huntress.com/blog/w2-malvertising-to-kernel-mode-edr-kill which gave 100% understanding on the BYOVD chain.
top 3, lockbit was a pure threat intel / OSINT lab so not the greatest achievement but happy with result.
Big week, after the latest CCD lab formbook I completed all remaining active labs, roasttoroot, markshell, satisfaction, code blue, recruiter and ended grind on Maromafix Ransomhub. Gained 11th global 2nd au new lab for CCD comes out in 2 days. Very happy with the result! o7
My First Hard rated lab on CCD completed this week with the release of Formbook, I was 5th to finish it within and was able to complete the lab within 2.5 hours of it releasing which I was happy with considering it was tagged 4 hours. 50 points banked!
new hard lab released, haven't had chance to complete it yet as I'm still working on mediums.
