magic_file

Overview

The police have detained a suspect, and the powered-on computer has been seized as evidence. A RAM capture and a non-volatile memory analysis have been performed. During the analysis, a strange file was found, and its nature is unknown.

Objective

• Investigate and determine the contents of this file.

Required Resources

• Volatility

• Download the practice here