Threat Hunting: Pivoting

Walkthrough summary

Threat Hunting: Pivoting TryHackMe walkthrough with 12 answered prompts and lab methodology notes.

Sample prompts covered

• What is the name of the account seen to be executing host enumeration commands on DC01?
  Open the walkthrough page to inspect the full answer and command flow.
• Following the port scanning activity investigation, what is the parent process of n.exe?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the full command-line value of the SharpHound.exe process?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the full command-line value of the process spawned by spoofer.exe?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the other service that was abused besides SNMPTRAP?
  Open the walkthrough page to inspect the full answer and command flow.