Challenge #8 – NTFS File System Case

In this case you are required to find all the data and files that have been hidden using some of the NTFS file system capabilities.

– E01 for the drive could be found: here
– There are 5 hidden things for you to find!
– Explain how these files were hidden

Solutions to this case and others can be found at Cyber 5W under the Case Studies section which can be found here.

Case was done with the help of Dr. Mariam Khader. Her Twitter handle could be found here.

End of Case.

About [email protected]

[Between Teams of Red and Blue, I'm with the Purple Team]
This entry was posted in Challenges, DFIR, File Systems, Forensics, Investigations, Windows and tagged , , , , , , , . Bookmark the permalink.