In this video, I work through the "Block" challenge on TryHackMe. We are provided with a small network capture and a memory dump of the LSASS process.
With these two artifacts in hand, our job is to uncover the tracks of an insider threat.
Enjoy!
-----
Notes: https://hacksmarter.notion.site/Block...
Join Hack Smarter: https://hacksmarter.org