Ebrahim MustafaICMTC CTF — DFIR Challenge Writeup (Invade)First, I used ‘vol.py’ and it didn’t work because this is not a windows image. Then I used windbg and it didn’t work too. After some time…Jul 31, 2023Jul 31, 2023
Ebrahim MustafaICMTC CTF — DFIR Challenge Writeup “Mega Mind”First, this was my first time analyzing an APK file.Jul 31, 2023Jul 31, 2023
Ebrahim MustafaICMTC CTF — DFIR Challenge Writeup “StealthyRansom”First, let’s read the description of the challenge:Jul 31, 2023Jul 31, 2023
Ebrahim MustafaICMTC CTF — DFIR Challenge Writeup “Devil init Persistence”First, I had a registry file ‘devil init persistence.reg’:Jul 31, 2023Jul 31, 2023
