I_Have_Become_Death

Forensics weight 22.40 No technique tags yet.

Difficulty Not rated yet

♡ 0

Flag format: NICC{...}

Oh boy... Things are becoming hectic and it is stressing me out.

My computer seems to be haunted as it prevents me from starting up my computer.

Thankfully, after multiple resets - it stopped. I checked the logs and it is in these weird folders named after COD maps. Can you discover which file, with its extension, and the time, keep as is, it was executed?

Flag Format: NICC{nameOfFile.extension_00:00}

Writeups

Official

ResolutionHost official by anonymous

https://github.com/sajjadium/ctf-archives/blob/main/ctfs/SpookyCTF/2023/forensic/I_Have_Become_Death/nuk3town/WDI/ResolutionHost

ExploitGuard MDM policy Refresh official by anonymous

https://github.com/sajjadium/ctf-archives/blob/main/ctfs/SpookyCTF/2023/forensic/I_Have_Become_Death/nuk3town/ExploitGuard/ExploitGuard%20MDM%20policy%20Refresh

Microsoft-Windows-DiskDiagnosticResolver official by anonymous

https://github.com/sajjadium/ctf-archives/blob/main/ctfs/SpookyCTF/2023/forensic/I_Have_Become_Death/nuk3town/DiskDiagnostic/Microsoft-Windows-DiskDiagnosticResolver

Community

No community writeups yet. Solved it? Share how.