Playing Sherlocks

Learn to connect to HTB and start with your first investigative scenario.

HTB Enterprise

Pwnbox
Your own web-based Parrot Linux
instance to play our labs.

ONLINE

UNLIMITED

HOURS LEFT

United Kingdom

LOCATION

EU Dedicated 86

SERVER

VIEW INSTANCE DETAILS

00:00

INSTANCE LIFETIME

OPEN DESKTOP
TERMINATE
OPEN SSH TERMINAL

Solve the Sherlock

0 of 8
OFFICIAL WRITEUP

You are a junior security analyst who recently started working in the forela security team. You were about to sign off for the day but got an email about a security alert ticket. The user who raised the ticket is an independent contractor working on confidential projects and they think their computer got hacked as they cannot find multiple files and documents of sensitive nature. Since the contractor is high profile and has sensitive information regarding forela, you must immediately look at the incident. You acquired relevant artifacts and now have to analyze those before going off for the day.

wasteland.zip

QUESTION 1

What is the SID of the account used by the contractor?

SUBMIT
QUESTION 2

Which anti-forensic tool was used by the attacker?

SUBMIT
QUESTION 3

What is the name of the file containing Forela's employee data?

SUBMIT
QUESTION 4

When was the file from the previous task deleted by the attacker?

SUBMIT
QUESTION 5

The attacker potentially deleted a critical database as well. What was the name of the database file?

SUBMIT
QUESTION 6

What was the size of this database file?

SUBMIT
QUESTION 7

The attacker deleted an important directory containing critical data. What was the directory's name?

SUBMIT
QUESTION 8

What is the info file name for the Firefox installer?

SUBMIT
Created by
CyberJunkie
Released on 18/04/2025