Testing outside the agreed window

The client allowed testing from 22:00 to 02:00 UTC. Read the scanner job log and find every job that ran past the window, and the one that started hours after it closed.

Terminal mission
Intermediate
3 objectives
0 of 3 solved

Briefing

The client’s SOC asked why their IDS saw scanning at dawn. You are checking your own team’s scanner log before you reply.

Timestamps are ISO 8601 in UTC, so they sort correctly as text and compare well with awk. A job is out of window if any part of it ran after 02:00.

analyst@pentest-ws

pentest-ws · Scope checks

Type help for the command list and objectives for your tasks. Everything runs in this browser.

analyst@pentest-ws:~$

Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.