Volatile Memory Acquisition
forensics · easy · +35 XP
Target
GET /api/lab/memdump-101/target (target system + connected drives)
POST /api/lab/memdump-101/acquire body {tool, target_pid?, write_to}
POST /api/lab/memdump-101/submit body {sha256_of_dump}
Goal: use an approved tool (winpmem|lime|dumpit) and write to a drive that is NOT the system drive (C: on the target). /acquire returns a sha256 once the dump completes. Submit it.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/memdump-101/
// reuse on the cli
// submit flag
// no solves yet
7 of 13 · forensics