Week 36

Github Forensics 3

Description

A client has requested assistance after a network compromise caused a full outage. Preliminary forensic analysis shows the attack originated from a single user account, indicating a potential insider threat. Investigate the incident to identify the insider and determine the actions taken during the attack. You have been given the compromised user's github profile - https://github.com/EMarseille99. What is the well known RAT (Remote administration tool) that the insider forked?

Links

• https://github.com/EMarseille99

50 points

Last Updated
2026-03-05 12:04:22