Tags: disk forensics windows autopsy 

Rating: 5.0

**Official Writeup**

**tl;dr**

+ Decrypt the encrypted GPG file found in Outlook Express with the private key stored on the device.
+ Decrypt the firefox saved passwords and log in to the website that the terrorist used.

Link to the writeup: [https://blog.bi0s.in/2020/08/03/Forensics/InCTFi20-LookoutFoxy/](https://blog.bi0s.in/2020/08/03/Forensics/InCTFi20-LookoutFoxy/)

Author: [g4rud4](https://twitter.com/NihithNihi)

Original writeup (https://blog.bi0s.in/2020/08/03/Forensics/InCTFi20-LookoutFoxy/).