Background

Carrots in Memory

100 Points
2026 forensics Disobey! 26 solvers
A text file named carrots.txt was used to write a short shopping list and opened with Notepad. The file was later deleted, but a memory dump of the system was captured shortly after. Recover the contents of the file from the provided memory dump.

memdump.zip

Hint: If you are doing this from the DNV Cyber booth at Disobey, the memdump.zip can be found predownloaded at /etc/memdump.zip.

Log In to Submit

You need to be logged in to submit your flag and earn points.

Log In