Challenge - Covering your Tracks

Covering your tracks - During a pentest or red team exercise, it is often necessary to erase traces of your presence, to throw the opposition off. The easiest way is to erase the logs outright. Also, as a scenario wraps up you want to leave a way back in with the creation of new accounts on several systems and/or the domain. An implant was set up to call out to the attacking machine on port 4321 every 15 seconds.  It will allow direct access to the admin network. This will aid in accessing the main Active Directory server.