https://mhm0ud-ab0l3ta.github.io/Digital forensics write-ups, CTF notes, and technical lab reports. 2026-08-20T14:31:32+00:00 Mahmoud Mostafa https://mhm0ud-ab0l3ta.github.io/ Jekyll © 2026 Mahmoud Mostafa /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-08-20T00:00:00+00:00 2026-08-20T14:28:03+00:00 https://mhm0ud-ab0l3ta.github.io/posts/eycc-trust-issue-silent-access/ Mahmoud Mostafa

Recently, I had the opportunity to create two DFIR challenges for the EYCC CTF.

2026-08-20T00:00:00+00:00 2026-08-20T14:28:03+00:00 https://mhm0ud-ab0l3ta.github.io/posts/eycc-silent-access-dfir-finals-challenge/ Mahmoud Mostafa

This one is a Windows Memory Forensics challenge that I intentionally made it easier than the Quals challenge. The main goal was to introduce participants to Volatility 2 & 3 and helping them understand how different plugins can be used to extract useful evidence from a memory dump.

2025-12-02T00:00:00+00:00 2026-07-05T14:01:46+00:00 https://mhm0ud-ab0l3ta.github.io/posts/neurogrid-htb-ctf-human-only-2025-secret-meeting-challenge/ Mahmoud Mostafa

Secret Meeting zoom forensics challenge write-up.

2025-12-02T00:00:00+00:00 2025-12-02T00:00:00+00:00 https://mhm0ud-ab0l3ta.github.io/posts/neurogrid-htb-ctf-3-4-dfir-solves-and-a-lot-of-lessons/ Mahmoud Mostafa

Three DFIR solves from HTB Neurogrid, focused on artifact triage and attack-chain reconstruction.

2025-11-12T00:00:00+00:00 2025-11-12T00:00:00+00:00 https://mhm0ud-ab0l3ta.github.io/posts/cyctf-2025-quals-dfir-write-up/ Mahmoud Mostafa

A DFIR write-up from CyCTF 2025 Quals covering Windows artefacts, persistence, and execution traces.