
DC30-Badge-Challenge-Writeup
Writeup for the DEF CON 30 badge challenge
ctfcurated-resourcesdigital-forensics+3
72

Writeup for the DEF CON 30 badge challenge

Read-only Windows forensic scanner for software traces — persistence, execution artifacts (Prefetch, Shimcache, BAM), user activity and Ghost Tasks…