Tags: forensics
Rating: 5.0
### In this challenge i just do analize to file .sav on Snapshot directory

### and i do strings to that file, and i got half the flag

### so i open it with vim, and trying to search that string

> DUCTF{w3_R_4bs0lute_pr3d4t0rs}
[my blog](http://medium.com/@InersIn)