ECW - At your service

Posted on ven. 22 novembre 2019 in CTF • Tagged with hack, learn, ctf, forensic, writeup, ecw, windows, service

At your service (150 points + ???)

Our internal IT team has developed an innovative tool to assist users in their daily tasks.

This tool has been deployed on some Windows workstations last months, but we strongly suspect that attackers have used it to gain administrator privileges on these machines.

The service …

Continue reading

ECW - SIEM investigation

Posted on ven. 22 novembre 2019 in CTF • Tagged with hack, learn, ctf, forensic, writeup, ecw, windows, service

SIEM investigation (100 points)

One of our employees, Robert, found a USB key on the harbour dock while walking around during his break and decided to connect it to his workstation. Being very curious, he decided to open files contained in the key. Unfortunately for him, one of the files …

Continue reading