Forum Discussion

Bronze I

6 months ago

APT29 Threat Hunting with Elasticsearch: Ep.11 – Demonstrate Your Skills

Hello! I could rather easily get the answers for the other questions, but Q6 has really taken me aback. The question is: A PowerShell script was executed to assist with further enumeration. What co...

defensive cyber

AbdelrhamnaAttia

Bronze II

5 months ago

Hello
I have completed this question, and I can confirm that the answer is located within the PowerShell. You will find it in plain text, including the IP address, and it is not embedded within the Base64-encoded data, the Powershell includes Base 64.

Forum Discussion

APT29 Threat Hunting with Elasticsearch: Ep.11 – Demonstrate Your Skills

Featured Places

Help & Support Forum

Related Content

APT29 Threat Hunting with Elasticsearch: Ep.5 – LNK File Analysis - Tools?

APT29 Threat Hunting with Splunk: Ep.11 – Demonstrate Your Skills - Question to Q9

S3: Demonstrate Your Skills

Zeek - Demonstrate Your Skills

APT29 Threat Hunting with Splunk: Ep.4 – Clean-up & Reconnaissance

Recent Discussions

Radare2 Reverse Engineering: Ep.2 – Windows Binary Part 2

ICS Malware: Triton - unpack trilog.exe

Privilege Escalation: Windows – Automated Enumeration

Web App Hacking (Lab series): CVE-2022-42889 (Text4Shell) – Offensive

FIN7 Threat Hunting with Splunk: Ep.3 – Execution Logs