Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Identify Intrusion Time from File Timestamps
Mission
Analyze timestamps of multiple files to identify when the intrusion occurred and which hidden log is related to it. Learn the basics of timeline analysis. Investigate the directory and find the flag in the hidden log.
Hints
Hint 1 Show
Use the stat command to check detailed file timestamps
Hint 2 Show
Display a timeline with find evidence/ -type f -printf "%T@ %Tc %p\n" | sort -n
Hint 3 Show
Check the suspicious file around 14:45 and the hidden log right after it