Clipbored
Forensics
No technique tags yet.
The SOC team alerted us about unusual activity detected on one of our workstations. They tried to handle the incident, but your expertise is now needed for a deeper analysis. The initial investigation of the environment showed that the user conducted suspicious web searches, followed by attempts to exfiltrate data.
The SOC team suggests that the user executed several sensitive commands quickly and repeatedly.
Challenge made by:
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.