Grhelp - Connect back

Description

You have the auditd logs of a compromised infrastructure.

The attacker successfully executed a command on a server, allowing it to connect to their command and control server.

• What command did the attacker execute? (e.g., `bash echo “FCSC”)
• What is the name of the compromised machine that executed this command? (e.g., Workstation)

The flag is the concatenation of the two responses: FCSC{machine-commandline} (e.g., FCSC{Workstation-bash echo "FCSC"})