Intermediate · ~60 min · DFIR / Maldoc
Challenge #01 · Analysing a multi-layer VBA maldoc
A suspicious Word attachment. Deobfuscate four VBA layers (Chr, StrReverse, XOR, Base64), extract the C2, and write a YARA rule.
START →
Intermediate · ~90 min · DFIR / Disk forensics
Challenge #02 · Disk image forensics: timeline & carving
A Linux ext4 image from an alleged data theft. Build a mactime timeline, recover deleted files by metadata and by carving, and separate facts from hypotheses.
START →
More challenges in preparation.
A Belgium-based provider of cybersecurity solutions, and the team behind SynapseRM / TPRM.