Fragility- Sherlock labs

Can Anyone help me how can I get the password for the backdoor account & fot the account attacker uses to access Splunk
where should I begin to search