Advent of Cyber 2022 [Day 11]-Memory Forensics Not all gifts are nice

TRYHACKME

Scenario: One of the workshop employees, knocks on the door. The elf says, “I’ve just clicked on something and now my workstation is behaving in all kinds of weird ways. Can you take a look?”.Elf McSkidy tasks you, Elf McBlue, to investigate the workstation. Running down to the workshop floor, you see a command prompt running some code. Uh oh! This is not good. You immediately create a memory dump of the workstation and place this dump onto …

code command ctf cyber cybersecurity door down elf employees forensics gifts memory memory forensics nice tryhackme uh oh volatility weird workshop workstation