Tryhackme:Memory Forensics

Perform memory forensics to find the flags

Introduction:

Perform memory forensics to find the flags. If you are having trouble, maybe check out the volatility room first.

login:

The forensic investigator on-site has performed the initial forensic analysis of John’s computer and handed you the memory dump he generated on the computer. As the secondary forensic investigator, it is up to you to find all the required information in the memory dump.

Analysis:

TrueCrypt:

CTF-PLAYER, security analyst, Pentesting, vapt, digital forensics