<?xml version="1.0" encoding="utf-8"?>
<!-- generator="FeedCreator 1.7.2-ppt DokuWiki" -->
<?xml-stylesheet href="http://wiki.zenk-security.com/lib/exe/css.php?s=feed" type="text/css"?>
<rdf:RDF
    xmlns="http://purl.org/rss/1.0/"
    xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
    xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
    xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel rdf:about="http://wiki.zenk-security.com/feed.php">
        <title>Zenk - Security ndh2k12_public:forensic</title>
        <description></description>
        <link>http://wiki.zenk-security.com/</link>
        <image rdf:resource="http://wiki.zenk-security.com/lib/tpl/dokuwiki/images/favicon.ico" />
       <dc:date>2026-05-04T01:43:09+02:00</dc:date>
        <items>
            <rdf:Seq>
                <rdf:li rdf:resource="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:damn_pst&amp;rev=1341165825&amp;do=diff"/>
                <rdf:li rdf:resource="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_1&amp;rev=1341345709&amp;do=diff"/>
                <rdf:li rdf:resource="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_2&amp;rev=1341345922&amp;do=diff"/>
            </rdf:Seq>
        </items>
    </channel>
    <image rdf:about="http://wiki.zenk-security.com/lib/tpl/dokuwiki/images/favicon.ico">
        <title>Zenk - Security</title>
        <link>http://wiki.zenk-security.com/</link>
        <url>http://wiki.zenk-security.com/lib/tpl/dokuwiki/images/favicon.ico</url>
    </image>
    <item rdf:about="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:damn_pst&amp;rev=1341165825&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2012-07-01T20:03:45+02:00</dc:date>
        <title>ndh2k12_public:forensic:damn_pst</title>
        <link>http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:damn_pst&amp;rev=1341165825&amp;do=diff</link>
        <description>Overview

Dans ce challenge, on nous donne un fichier .PST à analyser.

Format de fichier

.PST est l’extension associée aux fichiers contenant les messages dans certains logiciels Microsoft. Cette extension signifie « Personal storage Table ».</description>
    </item>
    <item rdf:about="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_1&amp;rev=1341345709&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2012-07-03T22:01:49+02:00</dc:date>
        <title>ndh2k12_public:forensic:password_manager_1</title>
        <link>http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_1&amp;rev=1341345709&amp;do=diff</link>
        <description>&quot;Password manager 1&quot;
Catégorie: Forensic

Score : 500

Description : &quot;Please recover the password from that memory dump&quot;
Nous avions à télécharger l’archive suivante :

&lt;http://54.247.160.116/forensics/keep1.tar&gt;

Cette dernière contenait un seul fichier  :
 - memdump.raw (dump physique de la RAM)</description>
    </item>
    <item rdf:about="http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_2&amp;rev=1341345922&amp;do=diff">
        <dc:format>text/html</dc:format>
        <dc:date>2012-07-03T22:05:22+02:00</dc:date>
        <title>ndh2k12_public:forensic:password_manager_2</title>
        <link>http://wiki.zenk-security.com/doku.php?id=ndh2k12_public:forensic:password_manager_2&amp;rev=1341345922&amp;do=diff</link>
        <description>&quot;Password manager 2&quot;
Categorie: ForensicScore : 1500Description : &quot;Please recover the password from that KeePass memory dump.&quot;
Nous avions à télécharger l’archive suivante :

&lt;http://54.247.160.116/forensics/keep2.tar&gt;

Cette dernière contenait là encore un seul fichier  :
- memdump.raw (dump physique de la RAM)</description>
    </item>
</rdf:RDF>
