PS Eclipse

Walkthrough summary

PS Eclipse TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• A suspicious binary was downloaded to the endpoint. What was the name of the binary?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the address the binary was downloaded from? Add http:// to your answer & defang the URL.
  Open the walkthrough page to inspect the full answer and command flow.
• What Windows executable was used to download the suspicious binary? Enter full path.
  Open the walkthrough page to inspect the full answer and command flow.
• What command was executed to configure the suspicious binary to run with elevated privileges?
  Open the walkthrough page to inspect the full answer and command flow.
• What permissions will the suspicious binary run as? What was the command to run the binary with elevated privileges? (Format: User + ; + CommandLine)
  Open the walkthrough page to inspect the full answer and command flow.