Forum Discussion

LewisMutton's avatar
LewisMutton
Icon for Bronze III rankBronze III
14 days ago

Trick or Treat on Specter Street: Ghost of the SOC

I know it's one of the challenge labs but I'm fairly sure I'm missing something extremely straight forward, it's 100 point difficulty 4.... Someone help me please! I'm banging my head against a wall ...
challenges
help & support
LewisMutton's avatar
LewisMutton
Icon for Bronze III rankBronze III
14 days ago

Yeah, I got that, but I can't identify the specific instance of said persistence mechanism 😅

clowdier's avatar
clowdier
Icon for Immerser rankImmerser
13 days ago

I see! If you've already brought up a list of all instances of that specific persistence type, and then reviewed the details for each one, one of them will look suspicious! 

  • immervivesolver's avatar
    immervivesolver
    Icon for Bronze I rankBronze I
    8 days ago

    I had Q6 and fetched credentials from file, but no clue in identifying persistence.

    • clowdier's avatar
      clowdier
      Icon for Immerser rankImmerser
      7 days ago

      This might help, alongside the correct answer to Q6: https://attack.mitre.org/tactics/TA0003/

      • immervivesolver's avatar
        immervivesolver
        Icon for Bronze I rankBronze I
        7 days ago

        It’s too big doc. Any sub technique or hint. I spend 7+ hours already on this