Logless Hunt

Walkthrough summary

Logless Hunt TryHackMe walkthrough with 21 answered prompts and lab methodology notes.

Sample prompts covered

• What is the earliest Event ID you see in the Security logs?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the title of the HR01-SRV web app hosted on 80 port?
  Open the walkthrough page to inspect the full answer and command flow.
• Which IP performed an extensive web scan on the HR01-SRV web app?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the absolute path to the file that the suspicious IP uploaded?
  Open the walkthrough page to inspect the full answer and command flow.
• Clearly, that's suspicious! What would you call the uploaded malware / backdoor?
  Open the walkthrough page to inspect the full answer and command flow.