Category: forensics
Author: demetris
Beth received a custom made chessboard from a famous woodworker. The carvings on the pieces are magnificent.
Reveal Spoiler
Episode3 (Partion Quick Formatted after file creation. Flag file is Eliza.xls with the flag in VBA code that is not set to execute.) Hint 1: Carving is only the beginning Hint 2: There is a reason macros have been disabled Flag: Chess can also be, beautiful. Solution: Mount the image and open the new drive letter using a File Carving tool e.g. DiskDigger, Active@ File Recovery, Foremost, Binwalk)