Challenges → Digital Forensics

Deep in the MFT

Medium 200 pts 🚩 23 solves ⏱ Avg. time to solve: 61d 20h

Challenge Question

A threat actor deleted a malicious script moments before security tooling scanned the affected system, hoping the deletion would cover their tracks. NTFS doesn't forget that easily -- metadata about deleted files often lingers in the Master File Table long after the file itself is gone. Locate the relevant record and recover what was hidden inside it.
Download Challenge File

Submit Flag

Log in or sign up to submit a flag.

Details

  • CategoryDigital Forensics
  • Authortark
  • AddedJul 4, 2026
  • Avg. Time to Solve61d 20h
  • First Blood🩸 aschulz

Recent Solvers

  • rabbit124 4d ago
  • piyush69 5d ago
  • Max Oct 18, 2026
  • nidigantalaasrith Oct 15, 2026
  • Nyx_Nightmare Oct 12, 2026
  • durga Oct 9, 2026
  • amalmj Oct 7, 2026
  • V1XU Oct 3, 2026
  • ajay Oct 2, 2026
  • nareshh Sep 29, 2026
Discuss in the forum →