fix: corrected mistake stemming from wrong config.yaml
Ahzek
parent
570e6e22a2
commit
de9fb1cf23
|
|
@ -36,7 +36,7 @@ Hierbei fanden wir mehrere Bilder, die jedoch keinen Bezug zum PIN aufzeigten -
|
|||
## [++] Timeline of Commands and Comments
|
||||
|
||||
### [+] Timestamp: `2025-05-09T06-48-10-588708+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Aufgabe 2.1: Verwenden Sie die Datei vUSB.zip und entpacken Sie diese (z.B. mit 7zip)
|
||||
|
|
@ -73,7 +73,7 @@ Compressed: 5484894
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T06:50:24.148849+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -93,7 +93,7 @@ Compressed: 5484894
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T06:50:30.823656+00:00
|
||||
|
||||
`mkdir` creates a directory. In forensic workflows, it is often used to prepare target folders for mounts or exported data.
|
||||
|
|
@ -136,7 +136,7 @@ The `-p` option ensures that parent directories are created as needed. It also a
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T06:51:12.146934+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -144,7 +144,7 @@ The `-p` option ensures that parent directories are created as needed. It also a
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T06-51-41-886735+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Scheint nicht beschaedigt und alles in Ordnung. Aufgabe beendet.
|
||||
|
|
@ -152,7 +152,7 @@ Scheint nicht beschaedigt und alles in Ordnung. Aufgabe beendet.
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T06-52-31-932154+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Aufgabe 2.2 wird gestartet.
|
||||
|
|
@ -173,7 +173,7 @@ Aufgabe 2.2 wird gestartet.
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T06:59:31.596821+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -181,7 +181,7 @@ Aufgabe 2.2 wird gestartet.
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-04-57-689819+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Aufgabe 2.2: Nun sollen Sicherungen mit drei Tools angelegt werden, dd, dc3dd, dcfldd
|
||||
|
|
@ -203,7 +203,7 @@ loop1 7:1 0 3G 0 loop
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:05:14.981961+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -224,7 +224,7 @@ xxd: /dev/loop1: Permission denied
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:05:37.517842+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -264,7 +264,7 @@ xxd: /dev/loop1: Permission denied
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:05:44.488574+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -306,7 +306,7 @@ xxd: /dev/loop1: Permission denied
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:07:20.489457+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -327,7 +327,7 @@ xxd: /home/kali/Documents/analysis-station/Uebung_u4/usb_dd.img: No such file or
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:07:59.304707+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -367,7 +367,7 @@ xxd: /home/kali/Documents/analysis-station/Uebung_u4/usb_dd.img: No such file or
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:08:14.806240+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -675,7 +675,7 @@ dc3dd completed at 2025-05-09 03:11:52 -0400
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:11:52.137822+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -715,7 +715,7 @@ dc3dd completed at 2025-05-09 03:11:52 -0400
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:13:09.054618+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -737,7 +737,7 @@ dc3dd completed at 2025-05-09 03:11:52 -0400
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:16:16.724835+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -777,7 +777,7 @@ dc3dd completed at 2025-05-09 03:11:52 -0400
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:17:24.460514+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -785,7 +785,7 @@ dc3dd completed at 2025-05-09 03:11:52 -0400
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-18-03-201283+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Aufgabe 2.2 beendet.
|
||||
|
|
@ -793,7 +793,7 @@ Aufgabe 2.2 beendet.
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-18-26-494801+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Aufgabe 2.4 gestartet, 2.3 wird haendisch niedergeschrieben
|
||||
|
|
@ -812,7 +812,7 @@ Error opening image file (raw_open: file "/dev/loop1" - Permission denied)
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:19:45.891807+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -875,7 +875,7 @@ FAT CONTENTS (in sectors)
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:19:52.802013+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -883,7 +883,7 @@ FAT CONTENTS (in sectors)
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-20-25-017861+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Es handelt sich also um FAT32
|
||||
|
|
@ -891,7 +891,7 @@ Es handelt sich also um FAT32
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-21-02-367502+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Nun zu Aufgabe 2.5, bei der wir mit speziellen Parametern arbeiten sollen
|
||||
|
|
@ -1298,7 +1298,7 @@ Nun zu Aufgabe 2.5, bei der wir mit speziellen Parametern arbeiten sollen
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:25:54.424666+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1306,7 +1306,7 @@ Nun zu Aufgabe 2.5, bei der wir mit speziellen Parametern arbeiten sollen
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-26-30-741366+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Weiter zu Aufgabe 2.6
|
||||
|
|
@ -1314,7 +1314,7 @@ Weiter zu Aufgabe 2.6
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-34-19-247795+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Wir werden nun zunaechst die Datei-Inhalte mit fls auflisten
|
||||
|
|
@ -1341,7 +1341,7 @@ Wir werden nun zunaechst die Datei-Inhalte mit fls auflisten
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:35:08.857575+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1360,7 +1360,7 @@ Invalid metadata address (fatxxfs_inode_lookup: 192827 is not an inode)
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:38:10.263484+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1368,7 +1368,7 @@ Invalid metadata address (fatxxfs_inode_lookup: 192827 is not an inode)
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-39-18-001829+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Korrektur, wir werden nun die l-Flag verwenden um von fls die korrekten lnodes zu erhalten
|
||||
|
|
@ -1395,7 +1395,7 @@ V/V 100466438: $OrphanFiles 0000-00-00 00:00:00 (UTC) 0000-00-00 00:00:00 (UTC)
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:39:42.188633+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1403,7 +1403,7 @@ V/V 100466438: $OrphanFiles 0000-00-00 00:00:00 (UTC) 0000-00-00 00:00:00 (UTC)
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-40-34-472272+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Nun koennen wir die gefundenen Dateien mit icat extrahieren
|
||||
|
|
@ -1423,7 +1423,7 @@ Nun koennen wir die gefundenen Dateien mit icat extrahieren
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:40:41.915848+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1443,7 +1443,7 @@ Nun koennen wir die gefundenen Dateien mit icat extrahieren
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:40:57.991781+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1463,7 +1463,7 @@ Nun koennen wir die gefundenen Dateien mit icat extrahieren
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:41:14.943345+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1471,7 +1471,7 @@ Nun koennen wir die gefundenen Dateien mit icat extrahieren
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-41-34-889472+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Nun berechnen wir zur Kontrolle die Hashes
|
||||
|
|
@ -1491,7 +1491,7 @@ Nun berechnen wir zur Kontrolle die Hashes
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:42:06.128482+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1510,7 +1510,7 @@ sha256sum: /home/kali/Documents/analysis-station/Uebung_04/Bild2.jpg: No such fi
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:42:27.270390+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1530,7 +1530,7 @@ sha256sum: /home/kali/Documents/analysis-station/Uebung_04/Bild2.jpg: No such fi
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:42:52.863339+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1550,7 +1550,7 @@ sha256sum: /home/kali/Documents/analysis-station/Uebung_04/Bild2.jpg: No such fi
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:43:19.303093+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1558,7 +1558,7 @@ sha256sum: /home/kali/Documents/analysis-station/Uebung_04/Bild2.jpg: No such fi
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-44-13-453381+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Wir fanden drei Bilder bisher, zwei von einem Adler oder Falken und ein blaues Bild
|
||||
|
|
@ -1566,7 +1566,7 @@ Wir fanden drei Bilder bisher, zwei von einem Adler oder Falken und ein blaues B
|
|||
---
|
||||
|
||||
### [+] Timestamp: `2025-05-09T07-47-53-499583+00-00`
|
||||
#### [+] Comment from analyst: Max Mustermann
|
||||
#### [+] Comment from analyst: Niklas Heringer
|
||||
|
||||
#### [+] Content:
|
||||
Wir fanden ausserdem Hinweise auf verwaiste Dateien, wir werden das untersuchen, da wir den PIN noch nicht gefunden haben.
|
||||
|
|
@ -1586,7 +1586,7 @@ Wir fanden ausserdem Hinweise auf verwaiste Dateien, wir werden das untersuchen,
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:48:08.005654+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1606,7 +1606,7 @@ Wir fanden ausserdem Hinweise auf verwaiste Dateien, wir werden das untersuchen,
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:56:27.046275+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
@ -1626,7 +1626,7 @@ Wir fanden ausserdem Hinweise auf verwaiste Dateien, wir werden das untersuchen,
|
|||
```
|
||||
|
||||
#### Context:
|
||||
**Analyst:** Max Mustermann
|
||||
**Analyst:** Niklas Heringer
|
||||
**Timestamp:** 2025-05-09T07:56:32.256258+00:00
|
||||
|
||||
[x] No specific explanation found.
|
||||
|
|
|
|||
Loading…
Reference in New Issue