Step 1: Identify the given files To start off, the first thing to do is usually analyzing the file type that is given. file * Alan's Private Life.E01: EWF/Expert Witness/EnCase image fil...

Step 1: understanding how thing works The provided file is a directory that contains a lot of directories and files which I have no idea where to start. Since there’s nothing for me to start with,...

Step 1: Information Gathering since a file memdump.raw was given as a challenge, lets try to analyze it with volatility. There are 2 types of volatility, volatility2 and volatility3, which is basi...