<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Forensics on XSS3cut10n3r</title><link>https://xss3cut10n3r.com/tags/forensics/</link><description>Recent content in Forensics on XSS3cut10n3r</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Sat, 03 Oct 2026 00:01:00 +0100</lastBuildDate><atom:link href="https://xss3cut10n3r.com/tags/forensics/index.xml" rel="self" type="application/rss+xml"/><item><title>NSA Codebreaker 2025 - Task 1: Getting Started</title><link>https://xss3cut10n3r.com/posts/nsa-codebreaker-2025-task-1/</link><pubDate>Sat, 03 Oct 2026 00:01:00 +0100</pubDate><guid>https://xss3cut10n3r.com/posts/nsa-codebreaker-2025-task-1/</guid><description>&lt;p&gt;&lt;a href="https://xss3cut10n3r.com/posts/nsa-codebreaker-2025/"&gt;← Series overview&lt;/a&gt;&lt;/p&gt;&#10;&lt;h2 id="task-1---getting-started-forensics"&gt;Task 1 - Getting Started (Forensics)&lt;/h2&gt;&#10;&lt;blockquote&gt;&#10;&lt;p&gt;You arrive on site and immediately get to work. The DAFIN-SOC team quickly briefs you on the situation. They have noticed numerous anomalous behaviors, such as: tools randomly failing tests and anti-virus flagging on seemingly clean workstations. They have narrowed in on one machine they would like NSA to thoroughly evaluate.&lt;/p&gt;&#10;&lt;/blockquote&gt;&#10;&lt;blockquote&gt;&#10;&lt;p&gt;They have provided a zipped EXT2 image from this development machine. Help DAFIN-SOC perform a forensic analysis on this - looking for any suspicious artifacts.&lt;/p&gt;</description></item></channel></rss>