Building a SOC Ransomware Simulation Lab

Objective: To test a real attack scenario. Lab Setup:

AD environment

File server

SIEM

EDR

Simulated phishing

Test Scenarios:

Credential dumping simulation

Lateral movement detection

Encryption simulation

Backup restore drill