https://blog.raw.pm/en/HackTheBox-CyberSantaCTF-2021-write-up/#baby-APT-Forensics

Original writeup (https://blog.raw.pm/en/HackTheBox-CyberSantaCTF-2021-write-up/#baby-APT-Forensics).