My Beautiful Research!

DFIR

A government research department has been hit by ransomware. Initial incident response has already pinpointed the initial attack vector, and physical inspection has identified a USB drive plugged into the back of an unattended computer. An image dump has been provided for you to analyse. What is the partition type of the USB drive?

The flag format is the short name of the filesystem with no spaces, e.g. FLAG{ext4}. Due to the nature of this challenge, you have a maximum of 5 attempts at this flag.

Last updated