Now we know we are dealing with an untampered image file. We acknowledge that the checksum of our file is the same: $ md5sum RHINOUSB.dd The MD5 checksum of said file can be found in the challenge’s formulation.Ĩ0348c58eec4c328ef1f7709adc56a54 RHINOUSB.dd Is there any evidence that connects the USB key and the network traces? If so, what?įirst I check the integrity of the image file that I have been given.What is recoverable from the dd image of the USB key?.What happened to the hard drive in the computer? Where is it now?.What relevant file transfers appear in the network traces?.What’s the username/password for the account?.Who gave the accused a telnet/ftp account?.In your report, provide answers to as many of the following questions as possible: Recover at least nine rhino pictures from the available evidence and include them in a brief report. at the University since 1972.įor the purpose of solving this challenge, I have to do the following task: The suspect is the primary user of this machine, who has been pursuing his Ph.D. In addition to the USB key drive image, three network traces are also available-these were provided by the network administrator and involve the machine with the missing hard drive. The USB key was imaged and a copy of the dd image is on the CD-ROM you’ve been given. Unfortunately, the computer had no hard drive. Evidence in the case includes a computer and USB key seized from one of the University’s labs. The network administrator at the University of New Orleans recently alerted police when his instance of RHINOVORE flagged illegal rhino traffic. The city of New Orleans passed a law in 2004 making possession of nine or more unique rhinoceros images a serious crime. Richard III, and was originally used in the DFRWS 2005 RODEO CHALLENGE. The Rhino Hunt data set requires examination of a small image file and three network traces. I skimmed over the different options and decided to challenge myself with The Rhino Hunt, developed by NIST. I found this awesome website which has a great compilation of challenges, research results and CTFs. Lately I’ve been getting into digital forensics investigation and in order to train myself I’ve been looking for some challenges. Tags: Forensics DFIR Networking Carving CTF Rhino Hunt (Part 1)
0 kommentar(er)
