Points: 100

Tags: forensics 

Poll rating:

Memory Analysis
100 points
Memory Analysis
Find the website that the fake svchost is accessing.
You can get the flag if you access the website!!

memoryanalysis.zip
The challenge files are huge, please download it first.
Hint1: http://www.volatilityfoundation.org/
Hint2: Check the hosts file

Writeups

ActionRatingAuthor team
Read writeup
0
SoftTrack
Read writeup
0
p4
Read writeup
0
rawsec
Read writeup
5.0
crattack
Read writeup
0
nacayoshi00
Read writeup
0
0xD13A
Read writeup
0
PogTeam
Read writeup
0
Yacine101
Read writeup
0
h1dd3ntru7h
Read writeup
0
ITCMUDTU
Read writeup
0
DauGau
Read writeup
0
yharima
Read writeup
5.0
Capture the Swag
You need to authenticate and join a team to post writeups