README.md

Forensics

Challenge Name	Description	Hint
file-desc	What type of file is this?	Did you add the output to jctf{INSERT_FILE_TYPE_HERE}?
HASH-browns	Get the decimal sum of the last 4 digits of all each file from an hash. They were talking about something pertains to md as the hash.	Did you convert it from hex to decimal? And did you make sure to get only the last 4 digits? Also make sure it is between the jctf{} flag formatter.
investigating-windows	Find the SID of the user robbr using the Windows registry files provided.	Try reg ripper?
data-about-data	Find the flag in this zip archive.	Cameras produce a lot of metadata.

Challenge Name	Description	Hint
closed-creds	Using the registry files provided, what is the password of the Administrator user?	Research dumping hashes from SAM.
where-did-you-go	Find the flag in this forensic disk image.	Research the NTFS Recycling.

Challenge Name	Description
alternate-reality	Find the flag in this forensic disk image.
pw-backup	I seem to not be getting the full and grand picture here