$ ctf42

The_False_Timeline

Forensics No technique tags yet.
Difficulty Not rated yet

Intermediate Nexus Incident Response recovered a filesystem image from Relay NX-17 after an unauthorised emergency key export. Investigators concluded that Relay Administrator KAI-7 performed the export at approximately 03:17.

There is one problem. KAI-7 had already disconnected. Someone wanted the investigation to end there.

Reconstruct the true incident timeline and recover the stolen emergency access key. Flag format: CSSCTF{...}

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.