# Crown Jewels

**Category:** De Monne Breach

**Points:** 75

## Description

\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/demonnebreach.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
\<sup>Created By: \<code>@syyntax\</code>\</sup>

The attacker copied several documents from the executive share. What was the first PDF read from that share? Submit its full filename, including the extension.

Submit the flag as `deadface{file.txt}`.

Use the PCAP from \**Uninvited Guest*.

## Services

- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)