Daily Blog #582: Solution Saturday 12/29/18 - Syscache Server 2008 R2 Challenge

Syscache Server 2008 R2 Challenge by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader,
         Well no winner this week, I may have pushed a bit far in a holiday week. Tomorrow is the first contest for the new year and we will all have a fresh start.

The Challenge:

On server 2008 r2 how would the following be seen in the syscache and what was logged:

1. Powershell empire agent

2. Meterpeter

3. Mimikatz

The winning answer:

None! I'll make sure to cover this in the test kitchen

Also Read: Daily Blog #581

Post a Comment