Day 02 Open the provided pcap, we can find many ftp connections. Grep for PASV leads to a valid login: Therefore the compromised account is found. Comments