Forum Discussion

kevinh's avatar
kevinh
Silver I
7 days ago
Solved

DFIR CTF: LightNeuron DLL - Question 8

In relation towards finding the decrypted email. I am wondering about what I am getting wrong from the conditional breakpoint in order to expose all the decrypted strings after the return function ...
  • kevinh's avatar
    2 hours ago

    Nevermind, by tracing create file activities I am able to retrieve the file contents by following in dump