For examining Windows Event Logs (if applicable) to find system names and connection timestamps.

Locate a specific "notes" file, identify its name, and extract its contents. Track file downloads performed by the user.

The file is an artifact from a digital forensics challenge featured in L3akCTF 2025 . It is primarily a network and system forensics exercise that requires participants to analyze data to reconstruct the activities of a specific user. Challenge Overview

Identify the SSIDs of multiple Wi-Fi networks the user connected to.

Trace specific web activity, such as identifying a GitHub page visited and a website logged into at the second café.

Use the artifacts to determine the specific city where these activities occurred. Recommended Tools Typical tools used for a challenge of this nature include:

Determine the ComputerName of the target device and the MAC address of the Wi-Fi adapter used. Network Artifacts:

To solve the challenge, you must extract and analyze the following types of information from the provided files: