Forum Discussion

Bronze I

5 days ago

FIN7 Threat Hunting with Splunk: Ep.2 – Initial Access

Question 8: Extract the hex-encoded image from the RTF that starts on line 108. Decode and open the resulting image file. What is the first line of text that appears in the image? I facing difficult...

Bronze II

15 hours ago

When you open the 2-list.rtf file, there's a huge block of hexadecimal code that begins at Line 108. You can copy and paste that into a separate file, then use a tool such as xxd to decode the hex and output it into a file. The decoded output should give you an image file which you can open - if it doesn't, then you've done it wrong. :)

Forum Discussion

FIN7 Threat Hunting with Splunk: Ep.2 – Initial Access

Featured Places

Help & Support Forum

Related Content

FIN7 Threat Hunting with Splunk: Ep.2 – Initial Access

FIN7 Threat Hunting with Splunk: Ep.3 – Execution Logs

APT29 Threat Hunting with Splunk: Ep.4 – Clean-up & Reconnaissance

APT29 Threat Hunting with Splunk Ep.11 Q11

FIN7 Threat Hunting with Splunk: Ep.3 – Execution Logs

Recent Discussions

C++ Stack Overflow Purple Belt

Guardduty: configuration and understanding findings lab not generating findings

Snort Rules: Ep.9 – Exploit Kits

ICS Malware: Triton ModuleNotFoundError: No module named 'pefile

Immersive: Threat Modeling Fundamentals