Forensic

Disk and memory artifacts, timelines, logs, and investigative reconstruction.

11 results

Root-Me/DNS exfiltration·30pts

Forensics scenario DNS exfiltration with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Logs analysis - web attack·25pts

On Logs analysis - web attack, investigators recover fragments from an image dump.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Heist of the century·25pts

Forensics scenario Heist of the century with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Find the cat·25pts

Challenge Find the cat: log triage and artifact correlation.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Windows - NTDS Secret extraction·20pts

On Windows - NTDS Secret extraction, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Docker layers·20pts

Challenge Docker layers: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/ICMP exfiltration·20pts

On ICMP exfiltration, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Command & Control - level 2·15pts

Challenge Command & Control - level 2: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Oh My Grub·15pts

On Oh My Grub, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Capture this·15pts

On Capture this, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Deleted file·5pts

Challenge Deleted file: log triage and artifact correlation.

Forensicseasy#root-me #easy #forensicMay 26, 2026