forensics

Office Retribution

Punkty: 233
Rozwiązań: 16

Our staff security engineer has a rather nasty habit of changing our wallpapers whenever we leave our PCs unlocked.
Like, we get it - not the best practice, but it's getting annoying. I'd like to report him to HR, but I don't have any proof at this time. I've managed to capture a RAM dump from his PC, can you check whether there's anything that we could use a proof?
office-retribution.raw.lrz will expand to about a gigabyte.

office-retribution.raw.lrz 166 MB

Format flagi: ecsc24{litery_cyfry_i_znaki_specjalne}.
W razie wątpliwości lub pytań dotyczących konkursu zapraszamy na naszego Discorda: https://discord.gg/gAtRKa2rcn.

Aby wysłać flagę, musisz się zalogować.