Tags: forensics
Rating: 5.0
### In this challenge i just do analize to file .sav on Snapshot directory
![](https://miro.medium.com/max/573/1*gM5OY4QHwR9Zaa8t342lEg.png)
### and i do strings to that file, and i got half the flag
![](https://miro.medium.com/max/588/1*bOYxkK1j4YT__133ng2sOQ.png)
### so i open it with vim, and trying to search that string
![](https://miro.medium.com/max/700/1*Tgj1yQ57xzFNjXhh7kYuxg.png)
> DUCTF{w3_R_4bs0lute_pr3d4t0rs}
[my blog](http://medium.com/@InersIn)