Windows Command Line Skill Assesment User 10

HTB Content Academy
1

I have tried all users who have had failed login attempt, but can’t find the solution.

Some commands I have tried are:

Get-WinEvent -FilterHashTable @{LogName='Security';ID='4625 '} -Oldest

and

Get-EventLog -LogName Security -InstanceId 4625 | sort -Property TimeGenerated

and I have also tried to filter out account name and tried those.

2

This took me almost 2 hours to figure out. You need to change your perspective, think outside the box and remember that this is a domain, with domain controllers

1 Like