Compromised Windows Analysis

Walkthrough summary

Compromised Windows Analysis TryHackMe walkthrough with 13 answered prompts and lab methodology notes.

Sample prompts covered

• What is the user's name whose system generated suspicious SSH traffic to a malicious IP?
  Open the walkthrough page to inspect the full answer and command flow.
• Which tool makes it easier to analyze CSV files?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the scheduled task created by the attacker?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the IP of the malicious server to which SSH requests are made?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the RAR file created during the attack?
  Open the walkthrough page to inspect the full answer and command flow.