Defensive Security: Digital Forensics Fundamentals (TryHackMe)

Search for a command to run...

No comments yet. Be the first to comment.
Link to the challenge on TryHackMe: Modern Web Stacks Introduction During a time-boxed engagement, the first tester to identify Apache/2.4.49 in a Server: header already knows the exact CVE before the

Link to the challenge/walkthrough on TryHackMe: Broken Authentication Introduction Authentication is the process by which a web application verifies the identity of the user making a request. It typic

Link to the HealthGPT AI security CTF challenge on TryHackMe. Meet HealthGPT, a well-meaning virtual assistant used by a busy healthcare team. It helps clinicians look up procedures, draft notes, and

Link to the section of the AI Odyssey CTF on TryHackMe: Token City. It covers challenges like: ML Sec: The Loan Arranger | AI Sec + DFIR: Rogue Commit | AI Sec + Web App Sec: Sealed Substation | Agent

Link to the Privilege Escalation Challenge on TryHackMe: Linux Privilege Escalation: Automation Introduction By now, you should have an understanding of basic privilege escalation techniques and how t

In this article, I will write a write-up for Digital Forensics Fundamentals that covers Introduction to Digital Forensics, Digital Forensics Methodology, Evidence Acquisition, and Windows Forensics.
Which team was handed the case by law enforcement? digital forensics
Which phase of digital forensics is concerned with correlating the collected data to draw any conclusions from it? Analysis
Which phase of digital forensics is concerned with extracting the data of interest from the collected evidence? Examination
Which tool is used to ensure data integrity during the collection? write blocker
What is the name of the document that has all the details of the collected digital evidence? chain of custody
Which type of forensic image is taken to collect the volatile data from the operating system? Memory Image
If you take the above coordinates and search one of the online maps, you will learn more about this location. Searching Microsoft Bing Maps or Google Maps for 51 deg 30' 51.90" N, 0 deg 5' 38.73" W reveals the street where the photo was taken. Note that for the search to work, we had to replace deg with ° and remove the extra white space. In other words, we typed 51°30'51.9"N 0°05'38.7"W in the map search bar.
Using pdfinfo, find out the author of the attached PDF file, ransom-letter.pdf. Ann Gree Shepherd

Using exiftool or any similar tool, try to find where the kidnappers took the image they attached to their document. What is the name of the street? Milk Street

What is the model name of the camera used to take this photo? Canon EOS R6

Thank you for reading my article. Please leave any questions or comments on improving my learning journey and the THM challenges.