Investigating a Hacked Windows Server | TryHackMe Cyber Defense Lab 

00:00 - Intro 03:48 - Windows System Information 05:14 - Windows User Information 12:00 - Startup Scripts Windows Registry 14:16 - Accounts With Windows Admin Privileges 15:20 - Malicious Scheduled Tasks 22:39 - Mimikatz On Windows 23:57 - Hacked Windows Hosts File 29:11 - Hacked Windows IIS (Malicious Shell) 31:23 - Windows Firewall Rules

AHHHHH!!!! I was forgetting the "Select" after the "|" in my powershell command...😂

Hard to see on a mobile screen