ClickBridge

A workstation assigned to Emma Hart, a member of the Finance-Ops team, was compromised through a social engineering attack. The network team determined that the threat actor established a covert command-and-control channel to enumerate the internal environment, harvest credentials, create a network tunnel, move laterally, and exfiltrate sensitive files from a domain controller. Analyze the provided PCAP and reconstruct the complete attack chain.