Possibly Related Threads…

Bratani · Nov 24, 2023, 05:52 PM

any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

br0tris · Nov 25, 2023, 05:42 PM

(Nov 24, 2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared

Bratani · Nov 25, 2023, 07:19 PM

(Nov 25, 2023, 05:42 PM)br0tris Wrote:
(Nov 24, 2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

LogFileCleared

yeah... how?

ka1t0_k1d · Nov 28, 2023, 02:13 PM

(Nov 24, 2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?

Hi. Did you solve the last 2 questions ?
May I ask you a bit ?

zeroghoost · Nov 28, 2023, 07:56 PM

any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank

Bratani · (This post was last modified: Nov 28, 2023, 10:12 PM by Bratani.)

(Nov 28, 2023, 07:56 PM)zeroghoost Wrote: any hint for executed powershell command for that. And I found Logon time but what format it is to convert UTC. Please Help me. Thank

try to find for Get-FileHash ..

(Nov 28, 2023, 02:13 PM)ka1t0_k1d Wrote:
(Nov 24, 2023, 05:52 PM)Bratani Wrote: any hint about the last question
We suspect the user deleted some event logs. Which Event log file was cleared?
Hi. Did you solve the last 2 questions ?
May I ask you a bit ?

import the evtx files to Event Viewer on windows

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	[FREE] 300+ Writeups PDF HackTheBox/HTB premium retired	Tamarisk	457	121,808	3 hours ago Last Post: jiqmug
	[MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot	htb-bot	166	34,874	5 hours ago Last Post: meomeothantai
	CC,CVV,VBV,NON VBV ,DUMPS ,FULLZ,BANK LOGS (FULL INFO) BEST LINKABLES @RICKBUTLER	Ballerwailer4G	0	85	9 hours ago Last Post: Ballerwailer4G
	[FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags	Techtom	110	14,329	Yesterday, 06:21 PM Last Post: Kazahk
	[FREE] HackTheBox All Cheatsheets	Tamarisk	85	11,320	Yesterday, 06:13 PM Last Post: Kazahk