Forum Discussion
LewisMutton
Ambassador
AmbassadorTrick or Treat on Specter Street: Ghost of the SOC
I know it's one of the challenge labs but I'm fairly sure I'm missing something extremely straight forward, it's 100 point difficulty 4.... Someone help me please! I'm banging my head against a wall ...
LewisMutton The answer to Q6 will clue you into the persistence mechanism you need to delete :)
LewisMuttonAmbassador
AmbassadorYeah, I got that, but I can't identify the specific instance of said persistence mechanism 😅
I see! If you've already brought up a list of all instances of that specific persistence type, and then reviewed the details for each one, one of them will look suspicious!
I had Q6 and fetched credentials from file, but no clue in identifying persistence.
This might help, alongside the correct answer to Q6: https://attack.mitre.org/tactics/TA0003/
