1 post
Extract obfuscated PowerShell from PCAP, deobfuscate, decrypt AES payload, and recover flag parts