CyberTalents offers many cybersecurity courses in different areas

Apply Now
Challenge Name:  

Silent Injection

Category Icon Category:
Digital Forensics
Level Icon Level:
easy
Created at Icon Created At:
8 months ago
Tries Icon Tries:
1 Times
Solved Icon Solved:
1 Times
Points Icon Points:
50
Difficulty Level
Reported by other talents
Basic Advanced
Rating
How other talents liked this challenge

Suspicious activity has been detected on the host win-x2. A vigilant SOC analyst noticed that the lsass.exe process, a critical Windows process responsible for enforcing security policies, appears to have been injected with malicious code.

Your mission is to investigate this activity using Splunk logs. Dig into the logs for win-x2, trace the malicious process responsible for the code injection into lsass.exe, and identify its name.

 

Flag format: flag{MaliciousProcessName}

(Example: if the process was evil.exe, your flag would be flag{evil.exe})

Credentials: admin/123456789

Note: Access the Splunk instance on port 8000, and note that the machine will remain up for one hour then you will have to restart it again.

Document Lock Icon

Sign in to view the challenge

Start Now

Copyright © Cyber Talents 2025. All Rights Reserved.