Broken Bonds
EasyDigital Forensics
Overview
SCENARIO
Analysts investigating a ransomware incident found a .pptx
file left behind on the compromised machine. The slideshow opens fine, the content looks mundane, and nothing immediately stands out.
But ransomware operators do not leave files behind by accident.
Tear the file apart and find what is hidden inside it.
Flag format: flag{}
Infrastructure
- Downloadable pptx
Provided Files
- project.pptx (3.1 MB)
Job Positions
Soc Analyst
Tags
MetadataFile CarvingOs ArtifactsIncident ResponseData Recovery