MemDisk
Forensics
No technique tags yet.
The Incident Response team has received notification that the server has been compromised. The team has conducted a disk and memory dump. You can help the team find evidence on the system. > nc 159.65.2.24 18818
Password: 6ZI346Y$>ln:ik[O Attached challenge
https://drive.google.com/file/d/13myCba45DrlSBUtQ-LDGBMIpldH6fuT4/view?usp=sharing
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.