How To Find Ransomware Using Splunk

This video will be going through the Conti ransomware room on TryHackMe to show how to find ransomware using the SIEM Splunk. The video is split into two parts, part one is a lecture on ransomware and exchange server and part 2 is the technical walkthrough finding ransomware in Splunk.

00:00 Ransomware Explained
12:00 Exchange Server Explained
16:15 Using Splunk to Find Ransomware