Quick_Mistake

Our internal service recently reported abnormal and inconsistent behavior. It is suspected that our network might have been compromised. It is also suspected that the attacker may have used the admin telemetry to their advantage. A packet capture taken during the incident window has been provided. Figure out what has been compromised and what internal data the attacker gained access to. Flag Format: nite{attacker_ip_attacker_CID_flag_part_2}

Author: kafka