HTB Sherlock: ProcNet
HTB Sherlock ProcNet writeup analyzing a simulated Sliver C2 intrusion through PCAP and API Monitor data, covering JA3 fingerprinting, execute-assembly, credential access, lateral movement, and NTDS.dit dumping.
June 24, 2026 10 min read 
