21 lines
895 B
Markdown
21 lines
895 B
Markdown
# False Telemetry
|
|
|
|
**Category:** De Monne Breach
|
|
|
|
**Points:** 250
|
|
|
|
## Description
|
|
|
|
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/demonnebreach.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
|
|
\<sup>Created By: \<code>@syyntax\</code>\</sup>
|
|
|
|
`WindowsTelemetryCheck` runs a PowerShell script that repeatedly tests a connection. Identify the destination IPv4 address, TCP port, and delay between attempts.
|
|
|
|
Submit the flag as `deadface{IP_PORT_SECONDS}`.
|
|
|
|
Use the memory dump evidence from **Who Goes There?**
|
|
|
|
## Services
|
|
|
|
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
|