Forum Discussion
APT29 Threat Hunting with Splunk Ep.11 Q11
What other value was set on the same key to facilitate the bypass. Searching on the key, there's only one log entry. I'm not clear on what "other value" means. I've tried all the file paths referenced in that log entry, different parts of the registry key, parts of the script that executes, even the cat.png file. What am I missing?
I finally figured out that the question just wanted the value at the end of the path, not the full path. I kept trying the full path because of the wording in the question saying it needed the full value.
2 Replies
- ArthurDent
Bronze I
I finally figured out that the question just wanted the value at the end of the path, not the full path. I kept trying the full path because of the wording in the question saying it needed the full value.
- SamDickison
Community Manager
Hey ArthurDent, apologies for just getting round to answering this. I'm glad you got to the answer, even if it wasn't obvious from the wording.