Forensics

Logger

Flavien Jaquerod
This challenge contains a file with USB traffic between many hosts. We can inspect this traffic and use a script to recover the keystrokes which contain the flag.

TrueSecrets

Flavien Jaquerod
this challenge makes us go through a .raw file containing all the content of a windows file system at some point. Checking the processes and applications, we see TrueCrypt file that we can use to retrieve content and break AES encryption to get the flag