RangeForce News: Threat-Centric Skill Addition and More

The calendar year isn't quite done yet, and we've squeezed a slew of new modules and some platform enhancements into 2023. Read on to learn more. 

New Threat-Centric: Email Service Compromise

Teams can now assess their preparedness against Email Service Compromise. Teams proficient in defending against this threat have demonstrated skills in user behavior analysis, message analysis, and platform and message hardening. Admins can track their team's progress in this area by going to Threat-Centric reporting on the Admin dashboard, selecting the gear, and then selecting the "Email Service Compromise" threat. A customized Readiness Plan for this threat is also available. 

Now in Beta: Google Cloud Platform Security Essentials 

This Learning Path, currently in beta, provides a comprehensive understanding of Google Cloud's structure and services crucial for effective incident handling. Modules now available include Incident Response with Google Cloud Netflow Logging, Google Cloud Data Access Logging in IR, and Google Cloud VM Forensics.

Recently Released Modules

AWS
  • Introduction to AWS Identity and Access Management
  • Implementing Multi-Factor Authentication in AWS
  • AWS Organizations and Service Control Policies
  • Identity Federation and Single Sign-On in AWS
  • Securing AWS APIs

Azure

  • Microsoft Entra ID: Sign-in Logs Analysis
  • Microsoft Entra ID: Audit Logs Analysis
  • Unified Audit Log Overview
  • Unified Audit Log Overview
  • OAuth Security Overview
  • OAuth App Analysis
  • Introduction to Azure Hierarchy
  • Azure Compute Overview
  • Azure Network Overview
  • Mailbox Audit Log Overview
  • Microsoft 365 Forwarding Rules Overview
  • Microsoft 365 Inbox Rules Analysis
  • Microsoft 365 Transport Rules Analysis
  • Introduction to Azure Storage Account Security

Cloud

  • Message Trace Logs Overview
  • Introduction to Google Cloud for Incident Response

CVEs

  • CVE-2023-38831 WinRAR - Arbitrary Code Execution
  • CVE-2023-23397 Microsoft Outlook: Privilege Elevation
  • CVE-2023-29357 SharePoint Server: Privilege Elevation

Digital Forensics

  • Evidence Acquisition and Preservation

Ransomware

  • Analyzing LockBit Ransomware

 

Read On