Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Find USB History in Windows Registry
Mission
Analyze the SYSTEM file to retrieve connected USB device information and the hidden flag. Learn the basics of Windows forensics. Provided file: SYSTEM
Not started
Hints
Hint 1Show
USB history is stored in SYSTEM\\CurrentControlSet\\Enum\\USBSTOR
Hint 2Show
Search USB history with strings SYSTEM | grep -i USBSTOR
Hint 3Show
Check hidden data with grep KINOCO SYSTEM