Forensics Level 5 100 points

Create Memory Profile for Unknown Linux Kernel

Mission

Perform custom Linux-kernel memory-profile matching with a safe static fixture. Match the BUILD_ID records in vmlinux, custom_kernel.dump, and profile.json, then analyze the matching symbol-profile record. No real memory dump or Volatility is required.

#forensics#memory#volatility#linux#profile

Clear it in 3 steps

Not started
  1. Start the environment

  2. Investigate the target

  3. Submit the flag