Skip to main content

Conti

$ tldr TryHackMe · Challenge · Medium

Description

An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.

Solve the room

Resources by skill

IIS (Microsoft Web Server)

Comments & tips

Solved this room a different way? Share it here — comments live in GitHub Discussions.
Last updated: 2026-05-09