Rating: 5.0

# Renzik's Case

## Description

My friend deleted important documents off of my flash drive, can you help me find them?

Note: The flag can be submitted with or without the hiphen ex. UMDCTF-{flag} or UMDCTF{}

https://drive.google.com/file/d/1VmUyHJqU11E0UE7OYTPYV3U2yVh2qL5g/view?usp=sharing

## Solution

We get only a `.img` file

Because we need to recover some files let's try with `Autopsy`

![](2022-03-05-15-51-30.png)

![](2022-03-05-15-51-50.png)

#### **FLAG >>** `UMDCTF-{Sn00p1N9-L1K3_4_Sl317h!}`

Original writeup (https://github.com/K1nd4SUS/CTF-Writeups/tree/main/UMDCTF_2022/Renzik's%20Case).