---
description: DFIR
---

# Remote Users / Getting Roasted 2

Within the zip file, you notice a few users are permitted to connect via RDP to TERMSERV. Which users are currently able to login via RDP? Submit the flag with each username in lowercase, separated by an underscore (\_), sorted alphabetically.\


For example if the users able to login are Zoolander and ADAM, the flag will be FLAG{adam\_zoolander}
