Package_Delivery

Authors: Rxxxf x letmewin

Our production server was hacked and the breach is still unknown. The SOC only preserved a snapshot taken during the attacker’s enumeration phase. You get a logical disk image of the host and a copy of the captured network evidence (the password will reveal itself). Piece together what happened, follow the trail, and recover the stolen data. Note: We relied on an intern to deploy our system, so expect a mess ...

Link: https://drive.google.com/file/d/1ogO0Z8Ke6pBz4e3CHTUB9imb0r9ZmBxR/view?usp=sharing