SpaceWay Aeronautics believes they have been hacked. They suspect that foreign competitors have access to the blueprints for their next generation space vehicle.
You need to verify their suspicions by finding the files, the method of transmission and the employee(s) responsible for doing this. SpaceWay suspects that one of their servers was compromised due to suspicious activity. They have provided an image of the server for you to analyze.
Your assignment is the analyze the machine and confirm SpaceWay’s suspicions. Assuming you find evidence of compromise, you are to identify the files that have been transmitted, identify the person(s) responsible for this breach and identify the destination of the files.
NOTE: This mission requires the use of Amazon Web Services (AWS) EC2 and this mission is compatible with Amazon Web Services’ Free Tier.