Forum Discussion
Bronze IIHelp needed for Threat Hunting - Credential Access
Hey clermagic224
This question is looking for the specific file that contains the credentials, not a ZIP file containing multiple files. If you keep digging, you'll find a file whose filename specifically refers to "passwords"—this is the file you're looking for! The answer to the next question also might give you a clue as to what the correct file is. I hope this helps!
ImmerserHey clermagic224
This question is looking for the specific file that contains the credentials, not a ZIP file containing multiple files. If you keep digging, you'll find a file whose filename specifically refers to "passwords"—this is the file you're looking for! The answer to the next question also might give you a clue as to what the correct file is. I hope this helps!
Bronze IIHey, i tried to query using targetimage, targetgetpath, targetfilename, image with, password* and pw* but still could not find. Any suggestions on how else i should filter? thanks!
- NyePrior
The full path contains the word password, but doesn't start with it, so you'd need to look for *password*, instead of password*
- clermagic224
How dumb I was - forgotting that wildcards work both ways! Thank you for pointing that out - I managed to figure it and completed the lab
- KieranRowley
Community Manager
It's all part of the learning process! I'm glad you got there in the end.
If you found a reply useful, please don't forget to mark it as a Solution ✅
Marking a reply as a solution helps other community members to find answers to questions that they may also have. It also confirms to your fellow community members that their reply was helpful! You can accept more than one reply as a solution.
