
d
This lab simulates a CVE-2023–38831 attack and must investigate diskimage and contains a variety of questions including understanding the Windows registry, NTFS files, cache browser, and a complete understanding of the functions that come out of Windows in the sequence of events. This is the solution and explanation of the challenge.
LINK :- https://medium.com/@ra3ed.uoro/dfir-actf-e24a21838bde