HTB Logjammer
by Bratani - Friday November 24, 2023 at 05:52 PM
RaidForums
Member
Posts: 3
Threads: 1
Joined: Nov 2023
Reputation: 0

#1
11-24-2023, 05:52 PM
any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: Nov 2023
Reputation: 0

#2
11-25-2023, 05:42 PM
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared
Reply
RaidForums
Member
Posts: 3
Threads: 1
Joined: Nov 2023
Reputation: 0

#3
11-25-2023, 07:19 PM
(11-25-2023, 05:42 PM)br0tris Wrote:
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared

yeah... how?
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: Nov 2023
Reputation: 0

#4
11-28-2023, 02:13 PM
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Hi. Did you solve the last 2 questions ?
May I ask you a bit ?
Reply
RaidForums
Member
Posts: 1
Threads: 0
Joined: Nov 2023
Reputation: 0

#5
11-28-2023, 07:56 PM
any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank
Reply
RaidForums
Member
Posts: 3
Threads: 1
Joined: Nov 2023
Reputation: 0

#6
11-28-2023, 10:11 PM (This post was last modified: 11-28-2023, 10:12 PM by Bratani.)
(11-28-2023, 07:56 PM)zeroghoost Wrote: any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank

try to find for Get-FileHash ..
(11-28-2023, 02:13 PM)ka1t0_k1d Wrote:
(11-24-2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Hi. Did you solve the last 2 questions ?
May I ask you a bit ?

import the evtx files to Event Viewer on windows
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] HTB-ProLabs APTLABS Just Flags kewlsunny 24 6,036 Yesterday, 04:10 AM
Last Post: cookky1
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 360 93,317 03-28-2026, 09:28 AM
Last Post: catsweet
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 87 11,288 03-27-2026, 07:22 PM
Last Post: stn
  HTB Eloquia User and Root Flags - Insane Box 69646B 13 3,947 03-27-2026, 06:14 PM
Last Post: vlxw
  HTB - ALL Challenges you Stuck in osamy7593 2 4,220 03-27-2026, 04:24 PM
Last Post: catsweet



 Users browsing this thread: 1 Guest(s)