Tryhackme - Investigating Windows 2.0

: Provide evidence to support your findings, such as screenshots, logs, and file hashes.

The room requires you to correlate artifacts across multiple Windows subsystems to uncover "attacker tradecraft" rather than just finding single flags. Key focus areas include: Persistence Mechanisms investigating windows 2.0 tryhackme