MeterpreterInternationalVPNServiceResticServiceInstallationDisabledEDRRDPDwelltime >30 daysPsExecDwelltime <48 hoursRcloneregsave.isoWin+RC:\ProgramDataMissedEDRAlertMimikatzTime-stompingnet1.exeCloudflaredBYOVDCompromisededge deviceDomain-joinedbackupserverwmic.exeUnquotedambiguousservicepathMeterpreterInternationalVPNServiceResticServiceInstallationDisabledEDRRDPDwelltime >30 daysPsExecDwelltime <48 hoursRcloneregsave.isoWin+RC:\ProgramDataMissedEDRAlertMimikatzTime-stompingnet1.exeCloudflaredBYOVDCompromisededge deviceDomain-joinedbackupserverwmic.exeUnquotedambiguousservicepath

CRT IR Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. Meterpreter
  2. International VPN Service
  3. Restic
  4. Service Installation
  5. Disabled EDR
  6. RDP
  7. Dwell time > 30 days
  8. PsExec
  9. Dwell time < 48 hours
  10. Rclone
  11. reg save
  12. .iso
  13. Win+R
  14. C:\ProgramData
  15. Missed EDR Alert
  16. Mimikatz
  17. Time- stomping
  18. net1.exe
  19. Cloudflared
  20. BYOVD
  21. Compromised edge device
  22. Domain-joined backup server
  23. wmic.exe
  24. Unquoted ambiguous service path