Chicken0248 CTF

STDiO CTF 2025 · Endpoint Forensics

Master Investigator

hardby Chicken0248Windows ForensicsLog AnalysisBrowserActive DirectoryFile SystemCertificate Services

One evening before yet another Monday, an intrusion was reported on Wowza Enterprise's Domain Controller server. The investigation team suspected the attack originated from a workstation belonging to an internal team member who had secretly come in to work overtime. Evidence was collected from both the workstation and the server for forensic analysis. Help us find out what really happened.

Evidence

Files

Response sheet

Submit your answers

0 / 15 accepted

Initial Access

Credential Access

Discovery

Lateral Movement

Discovery

Credential Access

Lateral Movement

Impact

Defense Evasion