Poor_Yooz
Forensics
No technique tags yet.
Author: bnd
Poor Yooz, his only mistake is that he can't remember things very well!!
Useful timeline for the investigation:
Suspicious network traffic was detected The employee, Ree Yooz, was disconneceted from his workstation session The packet capture was stopped and saved. Further suspicous network traffic was noticed after that A memory dump of the workstation has been taken The flag is in two parts. Flag format: shellmates{part1part2}
link: https://drive.google.com/drive/folders/1ww7DIElL9uI65fP4B_79KWOIC17Ai0Ob?usp=drive_link
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.