**tl;dr**

* Finding default browser and the top visited website.
* Extract timestamp, ID, Hostname of the TeamViewer FileTransfer session.

Link to the writeup: [https://blog.bi0s.in/2021/08/16/Forensics/Heist-InCTF-Internationals-2021/](https://blog.bi0s.in/2021/08/16/Forensics/Heist-InCTF-Internationals-2021/)

Author: [g4rud4](https://twitter.com/_Nihith)

Original writeup (https://blog.bi0s.in/2021/08/16/Forensics/Heist-InCTF-Internationals-2021/).