investigation notes
Aside from FTK Imager, what is the directory name of the other tool located in the tools directory under Desktop?
exiftool-12.47
Correct Answer
What is the visible extension of the "hideout" file?
Correct Answer
View the metadata of the "hideout" file. What is its actual extension?
.jpg
Correct Answer
Hint
A phone was used to photograph the "hideout". What is the phone's model?
ONEPLUS A6013
Correct Answer
A phone was used to photograph the "warehouse". What is the phone's model?
Mi 9 Lite
Correct Answer
Are there any indications that the suspect is involved in other illegal activity? (Y/N)
Y
Correct Answer
Hint
Who was the point of contact of Mr William S. McClean in 2022?
Karl Renato Abelardo
Correct Answer
A meetup occurred in 2022. What are the GPS coordinates during that time?
14°26'25.7"N 120°59'00.8"E
Correct Answer
What is the password to extract the contents of pandorasbox.zip?
DarkVault$Pandora=DONOTOPEN!K1ngCr1ms0n!
Correct Answer
From which company did the source code in the pandorasbox directory originate?
Submit
In one of the documents that the suspect has yet to sign, who was listed as the beneficiary?
Submit
What is the hidden flag?