Tags: volatility forensics 

Rating: 4.0

Original writeup (https://colleirose.github.io/execution-challenge-forensics-knight-ctf-cmd-history-in-volatility).