Description
Another user has a similar behaviour to La gazette de Windows challenge.
However, this time you may need more logs to recover what has been sent to the attacker.
Files
-
Microsoft-Windows-PowerShell%4Operational.evtx
68.00 KiB – 7b2ce2b5d231c9c09018fed031b1e8aae7a661d192167fb29f238a29bf744bdc -
Security.evtx
10.07 MiB – 1c55121cd0488aa625d44eefd7560e8e7749306358ae312523946891edc1f689
Author
ribt
Flag
Submit your solution
You can submit your writeup for this challenge. Read the FAQ to learn how to proceed.
You need to be logged in to submit a writeup.