STDiO CTF 2025 · Endpoint Forensics
hardby Chicken0248Windows ForensicsLog AnalysisBrowserActive DirectoryFile SystemCertificate Services
One evening before yet another Monday, an intrusion was reported on Wowza Enterprise's Domain Controller server. The investigation team suspected the attack originated from a workstation belonging to an internal team member who had secretly come in to work overtime. Evidence was collected from both the workstation and the server for forensic analysis. Help us find out what really happened.
Evidence
736dcdfde57fd5f7d23abc00be1511ccb1c6f3896f54fbfd8f669d8cacd13fabResponse sheet
All answers accepted