Vitalis_Night_Shift

ColdB Vitalis Hospital's SOC preserved evidence from a suspicious night-shift incident involving a radiology workstation and an internal imaging node.

The archive contains a network capture, service audit bundles, workstation artifacts, a removable media image, and a cached study bundle.

No obvious malware was found. One study appears to have been accessed and copied, but the recovered message seems to be split across multiple evidence sources.

Please recover the complete evidence!