---
title: "Discussion on \"TryHackMe - SeeTwo\" | Hashnode"
description: "Discussion on \"TryHackMe - SeeTwo\". In this task, we have to step into the digital forensics analyst's shoes and investigate the incident. Let's start our investigation by downloading the evidence.zip file. Unzipping it yields a .pcap f"
url: "https://hashnode.com/posts/tryhackme-seetwo/6ae874166643d2de86c45919"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [TryHackMe - SeeTwo](https://jetray.hashnode.dev/tryhackme-seetwo?utm_source=hashnode&utm_medium=feed)

In this task, we have to step into the digital forensics analyst's shoes and investigate the incident. Let's start our investigation by downloading the evidence.zip file. Unzipping it yields a .pcap f

Nov 2 · 5 min read · jetray.hashnode.dev  
Read the article

-   [#tryhackme-walkthrough](https://hashnode.com/tag/tryhackme-walkthrough)
-   [#writeup](https://hashnode.com/tag/writeup)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#tryhackme-seetwo](https://hashnode.com/tag/tryhackme-seetwo)

## Written by

[Cannon bolt](https://hashnode.com/@jetray)

@jetray

  
[View profile](https://hashnode.com/@jetray)

Security Researcher & CTF Player | Pentesting, SOC Operations & DFIR

Security researcher, CTF player, and cybersecurity undergraduate working across offensive and defensive security. I document penetration testing workflows, SOC investigations, DFIR case studies, and CTF challenges from the ground up.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.