Forensic

Hey guys, [das: Removed spoil]. But it doesn’t seem to be the solution. Is there a twist?

You’ve only solved part of the challenge. Keep going.

Hmm,that’s interesting!
I dug a little deeper and found some more info,but I’m stuck now. Could you pm me?

I’ve found the password for the info account... but it doesn’t validate the challenge. Did i forget something?

Keep digging, that’s not the password you’re looking for. Have you looked at what was running when the image was captured? Always a good place to start :)

Seems the flag file is not the solution, just got a -flag is not here-. So, how about findme, how to identify the file type? Any clues??

any new ideas about the challenge, we have three processes truecrypt, firefox and notepad, which one should we look. What is the keyword to search ?

Hello!
How can i find masterkey?
Volatility truecryptmaster give me nothing.

cryptsummary the first field, but it is not the flag answer.

Hi,
I have the password for the truecrypt process but how can I see what is the encrypt file? and how can extrat the encrypt file from the memory?

Hi again,

I have a container, in this container I have 3 files in two of them there ins’t the flag and the another it’s a *.odt file and I have not found passwords...
In this *.odt I have found "my_safety_box" but I don’t have the pass for decrypt it...
I don’t know how I can continue...
Anyone can help me please?
Thank you.