We’re testing our Memory Analysis package (currently in beta) against various challenges available online.

We found this challenge on the Memory Forensic site, so credit goes to them for highlighting it and to CyberTalents for creating it in the first place. The challenge can be downloaded directly from here.

The scenario is as follows:

“After acquiring memory from attacker pc we found there is no internet browser except internet explorer. Can you get internet history?”