BLACKSITE/Timeline

UPTIME 00:00UTC --:--:--

Operation Timeline

Chronological record of the engagement. Hot events mark pivotal moments — shell acquisitions, cred dumps, escalations.

6 EVENTS

Event Streamnewest first

19:43:56

0s ago

shell opened

14.221.9.40 :: root@edge-fw

OWNED

19:43:56

0s ago

cred dump

ad.corp.local :: 1,204 hashes

LOOT

19:43:56

0s ago

lateral move

win-dc-02 -> jump-box

PIVOT

19:43:56

0s ago

beacon check-in

implant 0xAE41 :: 41ms

C2

19:43:56

0s ago

port scan

10.0.0.0/16 :: 65535 ports

RECON

19:43:56

0s ago

payload staged

loader.bin :: 244kb

ARM

Engagement Summarylive

hosts discovered10

hosts owned3

kill chain phase3 / 7

hot events2

total events6

OWNED HOSTS

edge-fw-01 · 14.221.9.40

win-dc-02 · 10.0.4.12

jump-box · 10.0.3.8