VPN You Later

Challenge Description

A VPN account that hasn’t been used in months just logged in from a high-risk country. Perform a threat hunt on suspicious logins from VPN anonymizers to discover what account was compromised and what VPN providers should likely be blocked at the perimeter.

Log Source Types

MITRE ATT&CK Techniques