Benign

Walkthrough summary

Benign TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• How many logs are ingested from the month of March, 2022?
  Open the walkthrough page to inspect the full answer and command flow.
• Imposter Alert: There seems to be an imposter account observed in the logs, what is the name of that user?
  Open the walkthrough page to inspect the full answer and command flow.
• Which user from the HR department was observed to be running scheduled tasks?
  Open the walkthrough page to inspect the full answer and command flow.
• Which user from the HR department executed a system process (LOLBIN) to download a payload from a file-sharing host.
  Open the walkthrough page to inspect the full answer and command flow.
• To bypass the security controls, which system process (lolbin) was used to download a payload from the internet?
  Open the walkthrough page to inspect the full answer and command flow.