Tags: ftkimager roblox forensics windows-forensics-analysis
Rating: 4.7
Open up the images in FTK Imager
Look at the logs in /Users/adminbot6000/AppData/Roblox/logs/archive
Username is in the log file:
Name%22%3a%22ftcsvisgreat%22%2c%22DisplayName%22%3a%22ftcsvisgreat%22%2c%22
unencoded:
Name”:”ftcsvisgreat”,”DisplayName”:”ftcsvisgreat”,”
so our final flag is vsctf{ftcsvisgreat}
