Tags: forensics wireshark
Rating:
## Secret Document
***Secret document is material that FIB deems to be sensitive information and must be protected. (.docx included)***
after downloading ***Classified.docx***
***file CLassified.docx*** returns that in real this is 3,1M pcapng capture file

after quick analysis of protocols I have extracted data transfered by ftp protocol


flag is ***SBCTF{Cl4ssified_information}***