Photosandvideos1-3.7z
Run ExifTool on the photos and videos. Look for GPS coordinates, camera serial numbers, or "Software" tags that might indicate editing or hidden payloads.
A summary of the results. For a CTF, this would be the final or the answer to the challenge prompt.
Description of the second discovery (e.g., "GPS coordinates in IMG_002 led to a specific physical location"). 5. Conclusion PhotosAndVideos1-3.7z
Inspect images for hidden data using tools like StegSolve or steghide . Check for "Least Significant Bit" (LSB) manipulation.
List the top-level folders or files found upon opening (e.g., IMG_001.jpg , Vacation_Video.mp4 , secret.zip ). 3. Technical Analysis Detailed steps taken during the investigation: Run ExifTool on the photos and videos
Use binwalk or foremost to see if other files are embedded inside the media files (e.g., a .zip hidden inside a .jpg ).
To extract, analyze, and document artifacts found within the archive to answer specific investigative questions (e.g., finding a hidden flag, identifying malware, or recovering deleted metadata). 2. Initial Triage & Integrity For a CTF, this would be the final
The first step in any investigation is verifying the file's integrity using cryptographic hashes. [Insert Hash Here]