Palo Alto Networks labs

Every hands-on lab mapped to a Palo Alto Networks certification.

1 lab

All levels Beginner Intermediate Expert

Cyber Security › Common Vulnerabilities
Intermediate

Detection Engineering & Incident Response: CVE-2024-3400

Respond to a PAN-OS GlobalProtect command-injection compromise (CVE-2024-3400). Reconstruct the timeline from the access and service logs, see how shell metacharacters in the SESSID value ran commands as root, find the web-implant persistence, engineer a detection rule for the malicious SESSID pattern, then contain, eradicate, upgrade, verify and report - assuming breach.

20 steps 6 tasks ~75 min

Free while we launchFree for members View lab