Tracing USB-based data leaks with a new defensive scenario

A suspicious USB was plugged into a Windows Machine... and now, sensitive data is missing. It’s your job to find out how.
In our latest Sherlock, you’ll step into the role of a digital forensic investigator, analyzing real Windows artifacts to uncover the exfiltration trail.
Here’s what you’ll tackle:
Investigate Windows systems for traces of data theft
Use tools like RegRipper and Forensic Toolkit to dig deeper
Uncover how a simple USB can become a powerful tool for exfiltration
Strengthen your DFIR skills with hands-on analysis
Start practicing with Dedicated Labs →
Don't have access to HTB Enterprise Platform? 
Start a 14-day business trial FOR FREE →
Want to add new defensive skills to your utility kit?
Login to HTB Labs today →