Synapse Consulting - Lab Challenge #10 - Educational sample
===========================================================

  SYNAPSE LABS  |  EDUCATIONAL MATERIAL
  For education purposes only.

DISCLAIMER: SYNTHETIC Windows Security/System event export (CSV + JSON) of an
intrusion on NORTHSEA-DEV. All accounts, hosts and IPs are fictional
(RFC1918 / TEST-NET). No real environment is involved. Analyse in a VM.

Goal (SOC triage): from the raw events, reconstruct the attack timeline, find
the account takeover, the persistence and the privilege escalation, and give
containment actions. Tools: any CSV viewer, Timeline Explorer, grep/awk, jq.
Full walkthrough: https://www.synapse-consulting.eu/labs/
