Top Ad unit 728 × 90

Latest News


Daily Blog #671: Sunday Funday 4/12/20

Hello Reader,
          We had quite the strong showing last week from Maxim Suhanov. Who else is ready to stand up to the challenge? This week and next week we are focusing on what I think is unexplored territory that is rapidly expanding during the crisis, remote work and conferencing tools. I'm sure all of us will be investigating things that originated from interactions in these tools. Let's start with something I couldn't google and find quickly, Microsoft Teams.

The Prize:
$100 Amazon Giftcard

The Rules:

  1. You must post your answer before Friday 4/17/20 7PM CST (GMT -5)
  2. The most complete answer wins
  3. You are allowed to edit your answer after posting
  4. If two answers are too similar for one to win, the one with the earlier posting time wins
  5. Be specific and be thoughtful
  6. Anonymous entries are allowed, please email them to Please state in your email if you would like to be anonymous or not if you win.
  7. In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post

The Challenge:
When looking at Microsoft Teams from a DFIR perspective:
1. Where are the artifacts?
2. What format are they in?
3. Can you recover chat history?
4. Can you recover call history?
5. Can you recover file transfer?
6. Can you recover meeting history?
7. Anything else you can determine?
Daily Blog #671: Sunday Funday 4/12/20 Reviewed by David Cowen on April 12, 2020 Rating: 5

No comments:

All Rights Reserved by Hacking Exposed Computer Forensics Blog © 2014 - 2020
Powered By Blogger, Designed by Sweetheme

Contact Form


Email *

Message *

Powered by Blogger.