Level 1: File Server, 850 / 1,350 (63%)
62.962962962963% complete
Level 2: Admin PC, 0 / 2,500 (0%)
Level 3: Web Server, 0 / 3,750 (0%)
Total: 850 / 7,600 (11.2%)
| Challenge |
Solved |
Points |
|
11.Which executable do you think was used to exfiltrate data
(Level 1: File Server)
|
#4,
2 years, 7 months after release (2022-06-16 20:20:58)
|
175 |
|
10. Which registry key is the responsible for the non-matching timestamps in the previous challenge?
(Level 1: File Server)
|
#5,
2 years, 7 months after release (2022-06-16 20:04:32)
|
150 |
|
9. According to MFT, which time was last accessed the file README.txt.txt? And what time was REALLY opened this file with notepad.exe
(Level 1: File Server)
|
#5,
2 years, 7 months after release (2022-06-16 20:02:19)
|
150 |
|
8. Which user tried to mount \\*\C$
(Level 1: File Server)
|
#6,
2 years, 7 months after release (2022-06-16 20:00:12)
|
125 |
|
4.EHP Project has a candidate list (the shortlist that was leaked). When was this list last accessed?
(Level 1: File Server)
|
#7,
2 years, 7 months after release (2022-06-16 19:10:09)
|
75 |
|
3.The EHP database is encrypted using PGP. What's the database name?
(Level 1: File Server)
|
#8,
2 years, 7 months after release (2022-06-16 19:08:09)
|
75 |
|
2.How many subfolders are in this shared folder
(Level 1: File Server)
|
#8,
2 years, 7 months after release (2022-06-16 19:05:21)
|
50 |
|
1.CHITONSRV has a shared folder. What's its name?
(Level 1: File Server)
|
#10,
2 years, 7 months after release (2022-06-16 18:40:52)
|
50 |
