initial commit

de-monne-breach/cache-money/README.md

@@ -0,0 +1,20 @@
+# Cache Money
+
+**Category:** De Monne Breach
+
+**Points:** 150
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/demonnebreach.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@syyntax\</code>\</sup>
+
+We know a suspicious task launches a PowerShell script from an unusual directory. What is the script's full Windows path?
+
+Submit the flag as `deadface{absolute\file\path}`.
+
+Use the memory dump evidence from **Who Goes There?**
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)