http://rawsec.ml/en/BSides-San-Francisco-CTF-2017-write-ups/#40-easycap-Forensics

Original writeup (http://rawsec.ml/en/BSides-San-Francisco-CTF-2017-write-ups/#40-easycap-Forensics).