Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Find Process in Memory Dump
Mission
Analyze the process list recorded in memory.dump and find the flag contained in the suspicious process name. Learn the basics of memory forensics. Provided file: memory.dump
Hints
Hint 1 Show
Extract readable strings with strings memory.dump
Hint 2 Show
Check the process list with grep -i process memory.dump
Hint 3 Show
Look for a suspicious process name containing KINOCO