Which action improves tester OPSEC during post-exploitation?

Problem Statement

Tag artifacts clearly, keep timestamps, and remove them at the end. Never weaken defenses. Good OPSEC is about traceability and minimal footprint.

SolutionRead Only

touch /tmp/POC_<ticket_id>; rm /tmp/POC_<ticket_id> # on close

This question appears in the following practice sets: