10. The EHP database is encrypted using an AES 4096 bits key. Taking account of all the evidences you've got through the case ... Do you believe the EHP spanish candidates data is safe?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 18:05:51)
|
425 |
8. This computer is a webserver (hence, a juicy target). The attackers have left an extra backdoor. Locate it.
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 18:04:45)
|
400 |
7. How many times the attackers connected to ADMINPC1 computer?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 18:04:28)
|
400 |
6. How many times the attackers connected to this server?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 18:01:13)
|
375 |
5. What is the real name of this executable?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 17:58:44)
|
375 |
4. The attackers have dropped an executable on a system folder. What's its name?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 17:53:47)
|
350 |
3. What exploit would you bet that has been used to access the server?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 08:32:49)
|
350 |
2.Which user first connected successfully to the server?
(Level 3: Web Server)
|
1 year, 4 months after release (2021-03-31 08:15:28)
|
325 |
10. Which registry key is the responsible for the non-matching timestamps in the previous challenge?
(Level 1: File Server)
|
#4,
1 year, 4 months after release (2021-03-31 06:23:40)
|
150 |
5.How many accounts have successfully logged in on the last month?
(Level 1: File Server)
|
1 year, 4 months after release (2021-03-30 21:26:57)
|
100 |
9. How many computers has accessed salvador.bendito through RDP?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 21:24:33)
|
300 |
10. Which IP has connected to this computer using RDP?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 21:11:37)
|
300 |
8. There has been a recon action on this computer. When did this recon started?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 20:42:38)
|
275 |
7. Could you find the name of a program that can help exonerate Salvador?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 20:32:47)
|
275 |
6. When was the service used by the exfiltration software installed?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 20:22:22)
|
250 |
3. Which program has transmitted most data on 05/Nov/2019 ?
(Level 2: Admin PC)
|
1 year, 4 months after release (2021-03-30 20:13:54)
|
225 |
1.Where in the system is hidden the folder "Secreto" (Secret)
(Level 2: Admin PC)
|
#4,
1 year, 4 months after release (2021-03-30 18:40:54)
|
200 |
11.Which executable do you think was used to exfiltrate data
(Level 1: File Server)
|
1 year, 4 months after release (2021-03-30 18:37:41)
|
175 |
9. According to MFT, which time was last accessed the file README.txt.txt? And what time was REALLY opened this file with notepad.exe
(Level 1: File Server)
|
#4,
1 year, 4 months after release (2021-03-30 10:40:04)
|
150 |
8. Which user tried to mount \\*\C$
(Level 1: File Server)
|
#5,
1 year, 4 months after release (2021-03-30 10:32:38)
|
125 |
7. Which user was online when the file lista_candidatos.xlsx was modified the last time?
(Level 1: File Server)
|
#4,
1 year, 4 months after release (2021-03-30 09:53:32)
|
125 |
6. Which users have connected (using any kind of protocol) to the system in last month?
(Level 1: File Server)
|
#4,
1 year, 4 months after release (2021-03-30 09:39:49)
|
100 |
4.EHP Project has a candidate list (the shortlist that was leaked). When was this list last accessed?
(Level 1: File Server)
|
#6,
1 year, 4 months after release (2021-03-30 08:43:24)
|
75 |
3.The EHP database is encrypted using PGP. What's the database name?
(Level 1: File Server)
|
#6,
1 year, 4 months after release (2021-03-30 08:36:03)
|
75 |
2.How many subfolders are in this shared folder
(Level 1: File Server)
|
#7,
1 year, 4 months after release (2021-03-30 08:24:00)
|
50 |
1.CHITONSRV has a shared folder. What's its name?
(Level 1: File Server)
|
#8,
1 year, 4 months after release (2021-03-30 08:08:23)
|
50 |