Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Find Process in Memory Dump
Mission
Analyze the process list recorded in memory.dump and find the flag contained in the suspicious process name. Learn the basics of memory forensics. Provided file: memory.dump
Not started
Hints
Hint 1Show
Extract readable strings with strings memory.dump
Hint 2Show
Check the process list with grep -i process memory.dump
Hint 3Show
Look for a suspicious process name containing KINOCO