Challenges → Digital Forensics

Deep in the MFT

Medium 200 pts 🚩 0 solves ⏱ Avg. time to solve: 8d 2h

Challenge Question

A threat actor deleted a malicious script moments before security tooling scanned the affected system, hoping the deletion would cover their tracks. NTFS doesn't forget that easily -- metadata about deleted files often lingers in the Master File Table long after the file itself is gone. Locate the relevant record and recover what was hidden inside it.
Download Challenge File

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryDigital Forensics
  • Authoradmin
  • AddedJul 4, 2026
  • Avg. Time to Solve8d 2h
  • First Blood🩸 cyber_ninja

Recent Solvers

  • yusuf91 Jul 19, 2026
  • cyber_ninja Jul 5, 2026
Discuss in the forum →