Hello Reader,
Just a note that we already have a perfect score winner!
Congratulations to Plop aka Bastien Lardy who I will be contacting about their prize!
The CTF will remain up for quite some time to allow all of you a chance to learn and get ready for the big DFIR CTF of the year, the Defcon Unofficial DFIR CTF!
Just a note that we already have a perfect score winner!
Congratulations to Plop aka Bastien Lardy who I will be contacting about their prize!
The CTF will remain up for quite some time to allow all of you a chance to learn and get ready for the big DFIR CTF of the year, the Defcon Unofficial DFIR CTF!
Also Read: Daily Blog #657
Mobile > Analysis (15)
ReplyDeleteWhat country was the mobile device owner in when reading a document that was "IN MEMORY OF MOE"?
where is the actual document file located - in mobile or takeout? exact filepath?
Mobile > App Download Methods (10)
ReplyDeleteWhich of the following apps was NOT downloaded from Google Play?
where is the evidence for YouTube found?
Mobile > Time Zone (10)
ReplyDeleteWhat time zone was the phone in on Dec 9th?
answer is purely based on roaming SMS text messages received, yes?
Activity > Sharepoint 4 (5)
ReplyDeleteWhich was retrieved from the sharepoint first?
where is the evidence for this?
i wasn't able to bitlocker decrypt the secret .vhd on my host running Windows 7 (i managed to do it on my other host running Windows 10), was someone else able to do it on Windows 7?
ReplyDeleteBasic - Desktop > UTC Offset (2)
ReplyDeleteWhat was the timezone offset at the time of imaging?
where is the evidence for this? i don't see it inside MUS-CTF-19-DESKTOP-001.E01.txt