https://github.com/73696e65/ctf-notes/blob/master/2016-ctf.csaw.io/forensics-100-evidence_zip.md

Original writeup (https://github.com/73696e65/ctf-notes/blob/master/2016-ctf.csaw.io/forensics-100-evidence_zip.md).