Forum Discussion

LewisMutton's avatar
LewisMutton
Icon for Ambassador rankAmbassador
10 months ago

Trick or Treat on Specter Street: Ghost of the SOC

I know it's one of the challenge labs but I'm fairly sure I'm missing something extremely straight forward, it's 100 point difficulty 4.... Someone help me please! I'm banging my head against a wall ...
challenges
help & support
LewisMutton's avatar
LewisMutton
Icon for Ambassador rankAmbassador
10 months ago

Yeah, I got that, but I can't identify the specific instance of said persistence mechanism 😅

ClaudiaBusuioc's avatar
ClaudiaBusuioc
Alumni
10 months ago

I see! If you've already brought up a list of all instances of that specific persistence type, and then reviewed the details for each one, one of them will look suspicious! 

  • immervivesolver's avatar
    immervivesolver
    Bronze III
    10 months ago

    I had Q6 and fetched credentials from file, but no clue in identifying persistence.

    • ClaudiaBusuioc's avatar
      ClaudiaBusuioc
      Alumni
      10 months ago

      This might help, alongside the correct answer to Q6: https://attack.mitre.org/tactics/TA0003/

      • immervivesolver's avatar
        immervivesolver
        Bronze III
        10 months ago

        It’s too big doc. Any sub technique or hint. I spend 7+ hours already on this