Advanced Threats Difficulty: hard Log Format: syslog

Living Off the Land

No malware dropped. No foreign binaries. Just curl, base64, wget, and bash — tools that ship with every Linux server. But in this sequence, they're a fully functional C2 implant. Find the campaign.

LOLBinsFileless MalwareC2Defense Evasion

Investigation Scenario

No malware dropped. No foreign binaries. Just curl, base64, wget, and bash — tools that ship with every Linux server. But in this sequence, they're a fully functional C2 implant. Find the campaign.

Investigation Objectives

← Back to all cases View query syntax guide Previous: Trojan Horse Next: Cloud Heist →