astronaut
Logbook
Web Security • Research • CTF
Menu
Filtered View

Tag: #incident-response

2 posts

Jul 22, 2026

HTB Sherlock: MisCloud

GCP incident response notes for HTB Sherlock MisCloud, covering exposed RDP, Gitea git-hook code execution, service-account abuse, Cloud Storage access, and data exfiltration.

#writeup #htb #sherlock #gcp #cloud-ir
HTB Sherlock for medium
Jul 16, 2026

HTB Sherlock: Nubilum-1

AWS CloudTrail investigation of unauthorized EC2 activity, exposed S3 access, attacker infrastructure changes, and PoshC2 activity.

#writeup #htb #sherlock #aws #cloudtrail
HTB Sherlock for medium