Event_analyze

There was a suspicious communication from a PC in the company. It seems that a part-time worker in the company had installed and used a package he had made himself, but a malicious user had mixed malware into it.

The username of the malicious user who dropped the malware Malware external communication destination IP format: Convert to .Example : When , it becomes_ 192.0.2.0192_0_2_0 The reported file name of the malware (excluding the extension). For example:test.pytest Flag format The above three elements -are combined CPCTF{username-IP-filename}