HTB Logjammer
by Bratani - Friday November 24, 2023 at 05:52 PM
#1
any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Reply
#2
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared
Reply
#3
(11-25-2023, 05:42 PM)br0tris Wrote:
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared

yeah... how?
Reply
#4
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Hi. Did you solve the last 2 questions ?
May I ask you a bit ?
Reply
#5
any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank
Reply
#6
(11-28-2023, 07:56 PM)zeroghoost Wrote: any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank

try to find for Get-FileHash ..

(11-28-2023, 02:13 PM)ka1t0_k1d Wrote:
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Hi. Did you solve the last 2 questions ?
May I ask you a bit ?

import the evtx files to Event Viewer on windows
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 106 42,242 10-31-2026, 07:33 PM
Last Post: aistax
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 383 138,762 10-31-2026, 11:47 AM
Last Post: thaytoiyeucoay30nam
  HTB PWN- Oxidized ROP macavitysworld 4 1,049 10-29-2026, 01:01 PM
Last Post: A1Raid3r
  HTB - code + titanic walkthrough | free tony_boom23 3 7,267 10-25-2026, 06:35 AM
Last Post: A1Raid3r
  HTB apt lab note zapot 14 35,539 10-03-2026, 08:09 PM
Last Post: whuuaa



 Users browsing this thread: 1 Guest(s)