Broken Bonds

EasyDigital Forensics

Overview

SCENARIO

Analysts investigating a ransomware incident found a .pptx
file left behind on the compromised machine. The slideshow opens fine, the content looks mundane, and nothing immediately stands out.

But ransomware operators do not leave files behind by accident.

Tear the file apart and find what is hidden inside it.

Flag format: flag{}

Infrastructure

- Downloadable pptx

Provided Files

- project.pptx (3.1 MB)

Job Positions

Soc Analyst

Tags

MetadataFile CarvingOs ArtifactsIncident ResponseData Recovery