Type your comment> @TazWake said:
But there’s a lot of data to work through. Unfortunately, this is realistic - you might do a pentest and land on a box which has 30 user’s documents and you have to go through terabytes of tedious stuff to see if they’ve left credentials out.
Not only is this a fair hint, it is an absolute must for a solid PenTest methodology. Thank you @Tazwake
In an attempt to follow the guidance with my own hint: as you progress to each user, pretend you are home shopping, look in every corner.
Great work @ChefByzen for this box.