Active Directory : Advent of Cyber 2024 : TryHackMe : Day15

Active Directory : Advent of Cyber 2024 : TryHackMe : Day15
Day 15: Be it ever so heinous, there's no place like Domain Controller.
tryhackme.com/...
Advent of Cyber 2024
Dive into the wonderful world of cyber security by engaging in festive beginner-friendly exercises every day in the lead-up to Christmas!
Use the "Security" tab within Event Viewer to answer questions 1 and 2.
No answer needed
Complete
On what day was Glitch_Malware last logged in?
Answer format: DD/MM/YYYY
What event ID shows the login of the Glitch_Malware user?
Read the PowerShell history of the Administrator account. What was the command that was used to enumerate Active Directory users?
Look in the PowerShell log file located in Application and Services Logs Windows PowerShell. What was Glitch_Malware's set password?
Review the Group Policy Objects present on the machine. What is the name of the installed GPO?
#adventofcyber #tryhackme #day15 #activedirectory