Black T-Shirt Cyber Forensic Challenge paper
The Black T-Shirt Cyber Forensics Challenge is a free, annual contest, which has been designed to address a variety of elements important in conducting today’s digital forensics examinations, incident responses, and intrusion analyses. This Challenge includes elements such as:
File system and operating system identification
Recovery of operating system and application artifacts
Recovery of user-created artifacts
Conducting in-depth analysis across the system and scenario, which extends beyond artifact recovery
Event reconstruction
Report writing
Below is the description of the challenge.
Security engineers running the data loss prevention program for The HiTeK Company believe they have encountered potential data exfiltration of sensitive information from its corporate network. They had incident responders make forensic images of two related computers and capture network traffic around the time of the alleged incident. You are to analyze the evidence and confirm the validity of the security engineers’ statement. The point structure for the challenge will be released to participants upon registration.
