[MRT-X] Concerns over OPSEC on FRST Logs

[MRT-X] Concerns over OPSEC on FRST Logs - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [MRT-X] Concerns over OPSEC on FRST Logs (/showthread.php?tid=6294240)

[MRT-X] Concerns over OPSEC on FRST Logs - Tha Sneak - Mar 13, 2025

🔍 Malware Removal Academy | Posting Logs & Privacy 🔍

📌 Important Information Regarding Logs 📌

I was asked about what to do when posting logs in the Malware Removal Academy where your name or IP address may be visible.

✔️ Your IP Address:
• Your IP address should not be visible unless you have a proxy set up in the registry.

✔️ Your Name in File Paths:
• If there is anything personally identifiable, such as your name appearing in the user path:
❌ C:\Users\YourName
✅ C:\Users\Admin (or another generic name)

🛡️ Protecting Your Privacy 🛡️

✔️ If you feel uncomfortable sharing your log, you can PM me, and I will ensure that all personally identifiable information is removed for you.
✔️ If you prefer to edit your log yourself, you must PM me to let me know that you made the necessary changes before posting.

🤝 A Safe & Supportive Learning Environment 🤝

I want you all to feel comfortable and safe here in this learning environment. If you have any concerns, don’t hesitate to reach out.

🦠 Learn, Practice, and Stay Secure! 🦠

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Beherit - Mar 13, 2025

Ah yes, I was just thinking about that, but realized I used fake names when I created the accounts. Good call!

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Tha Sneak - Mar 13, 2025

(Mar 13, 2025 09:54 PM)Beherit Wrote: Ah yes, I was just thinking about that, but realized I used fake names when I created the accounts. Good call!

Yeah, it's something I forgot to mention when I re-created the academy. It is important to make sure people are comfortable with us analyzing their logs. So I'll have to change some things around for actually doing logs in the public as well. Maybe implement a password protected zip file or pastebin or something.

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Pr0m3th3us - Mar 13, 2025

This is the format i used when i posted mine.

I replaced my PC name with (MyPC)
My ISP with (MyISP)
My IP with (MyIP)
My username with (User)

No parenthesis of course.

And this will all have to be edited back in when or if you make a fixlist.txt

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Bastille - Mar 14, 2025

Nuts and bolts, I always warn users about this and their document's names that could be like "John DOE summons", "bills" or "id card", or whatever. These files can appear in the "one month" or "90 days" files

I personally prefer when they send me the logs instead of posting in the thread.

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Tha Sneak - Mar 14, 2025

(Mar 14, 2025 02:24 AM)Bastille Wrote: Nuts and bolts, I always warn users about this and their document's names that could be like "John DOE summons", "bills" or "id card", or whatever. These files can appear in the "one month" or "90 days" files

I personally prefer when they send me the logs instead of posting in the thread.

Yeah, I think we need to come up with an alternative thinking about it since these logs are much more detailed than they used to be such as posting a password protected pastebin and private messaging us the password or a password protected zip file.

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Pr0m3th3us - Mar 14, 2025

(Mar 14, 2025 03:10 AM)Tha Sneak Wrote: Yeah, I think we need to come up with an alternative thinking about it since these logs are much more detailed than they used to be such as posting a password protected pastebin and private messaging us the password or a password protected zip file.

I think the Pastebin seem to be fine. Ands it free. 😁

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Tha Sneak - Mar 14, 2025

(Mar 14, 2025 09:29 PM)Rustoleum Wrote: I think the Pastebin seem to be fine. Ands it free. 😁

That's the way I think seems best myself.

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Pr0m3th3us - Mar 15, 2025

I would also like to add that the pass-worded Pastebin method allows one to upload their results of the Log#3 for the teacher to see only. If it was public then anyone could just cheat.... Not saying people WOULD do that but at least it removes the possibility.

RE: [MRT-X] Concerns over OPSEC on FRST Logs - Tha Sneak - Mar 16, 2025

(Mar 15, 2025 05:08 PM)Rustoleum Wrote: I would also like to add that the pass-worded Pastebin method allows one to upload their results of the Log#3 for the teacher to see only. If it was public then anyone could just cheat.... Not saying people WOULD do that but at least it removes the possibility.

I actually have a shit ton of logs not everyone will get the same one. :P