-
0810 InCTF 2020 Forensics_LOGarithm2020/Write-Ups 2020. 8. 10. 05:30
수 강정윤
https://hec-ker.tistory.com/162
InCTF 2020 Forensics_LOGarithm
Let's solve the second forensics question. Two pcap and vmem files were given below. First, you need image information about the vmem file. .\volatility_2.6_win64_standalone.exe -f .\Evidence.vmem..
hec-ker.tistory.com
'2020 > Write-Ups' 카테고리의 다른 글
0810 [CTF-d] Network_DefCoN#21 #6 (0) 2020.08.10 0810 [CTF-d] Network_DefCoN#21 #5 (0) 2020.08.10 0810 InCTF 2020 Forensics_Investigation Continues (0) 2020.08.10 0810 [DigitalForensic] Network_with CTFDefCoN#21 #7 (0) 2020.08.10 0810 [DigitalForensic] Network_with CTFDefCoN#21 #6 (0) 2020.08.10