Skip to main contentSkip to main content
Room Banner
Room Icon

Disgruntled

Premium room

Use your Linux forensics knowledge to investigate an incident.

easy

30 min

20,470

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Hey, kid! Good, you’re here!

Not sure if you’ve seen the news, but an employee from the IT department of one of our clients (CyberT) got arrested by the police. The guy was running a successful operation as a side gig.

CyberT wants us to check if this person has done anything malicious to any of their assets. Get set up, grab a cup of coffee, and meet me in the conference room.

Connecting to the machine

Start the lab machine in split-screen view by clicking on the green "Start Lab Machine" button on the upper right section of this task. Alternatively, you can connect to the using the credentials below via "".

THM key
Username root
Password password
IP MACHINE_IP
Answer the questions below
Grab a cup of coffee.