rclone and the campaign masters

S3 data events are one JSON object per line. Count GetObject calls by IP and user agent, find the bulk download, and name the role and folder it pulled from.

Terminal mission
Intermediate
3 objectives
0 of 3 solved

Briefing

Unreleased campaign artwork appeared on a forum. Data events for design-assets-prod were enabled last month, so every object read is logged. The export is JSON Lines, one record per line.

rclone is a popular sync tool. It is legitimate, and it is also a common way to copy a lot of data out fast.

analyst@cloud-shell

cloud-shell · Cloud logs

Type help for the command list and objectives for your tasks. Everything runs in this browser.

analyst@cloud-shell:~$

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.