Hacked Lab

Instructions: Uncompress the lab (pass: cyberdefenders.org) A soc analyst has been called to analyze a compromised Linux web server. Figure out how the threat actor gained access, what modifications were applied to the system, and what persistent techniques were utilized. (e.g. backdoors, users, sessions, etc).