For the third year in a row, the Magnet User Summit will feature a Capture The Flag (CTF) Event. For the past two years, we have had the privilege of hosting fantastic challenges created by CTF extraordinaire duo, David Cowen and Matthew Seyer. This year, we are passing the torch and are working with the Digital Forensics Association (DFA) at Champlain College to create the content.
The students at DFA created the 2019 Unofficial DefCon DFIR CTF hosted by Dave and Matt in Las Vegas last summer. They have hosted multiple CTFs at Champlain College and created a workshop on developing CTFs at OSDFCon in 2019.
The DFA volunteered to create this year’s MUS CTF. Working with this fabulous team from the DFA, we know this year’s CTF is going to be fun and challenging featuring a variety of evidence. But we don’t want to give away too much! The team includes Jack Farley (@JackFarley248), Garrett Mahoney (GarrettMahoney_), Adam Ferrante (@ferran7e), and Jordan Kimball. Space in the CTF is limited so if you would like to participate, register here: https://www.magnetusersummit.com/registration.
So, What is a DFIR CTF?
Regular CTF events are common in the information security field and focus on hacking and exploiting machines to reach a target. Each target or level reached gives you points towards a total score and the harder the target, the more points are awarded. Competing against other teams, the team with the highest score wins.
DFIR CTFs are slightly different as our skillsets don’t typically involve hacking other computers to reach a goal – but with the same scoring concepts applied – you can compete against each other for points. A DFIR CTF has a set image that has been prepared for contestants with questions that need to be answered during your investigation of that image. The questions vary in difficulty and are scored accordingly so the more difficult questions are weighted the most and will give you the most points. The more questions answered correctly the higher your score and the more likely you are to win against the other contestants.
For the Magnet User Summit DFIR CTF, you will be provided with a trial key for Magnet AXIOM, a pre-processed case containing the images, and the evidence images. However, you are free to use any tool you wish to complete the CTF.
The Magnet User Summit is three-day event from May 11-13. The CTF will take place May 12 from 4:45-7:45 PM.
1. No teams, this is an individual contest
2. You can use any tool you chose; this is a knowledge challenge not a tool challenge
5. Submissions must be entered before the end of the CTF Challenge
6. You must be registered for the event to participate
7. Only winners names will be revealed
8. If you want to submit under a pseudonym we still need a real name for prize awards
9. Prizes will be awarded, and winners announced during the Customer Appreciation Event the same evening as the CTF
10. The first-place winner will be a guest on the Forensic Lunch live from the Magnet User Summit the next day. For anyone who hasn’t watched the Forensic Lunch before, David (@HECFBlog) and Matt (@Forensic_Matt) host a weekly podcast on various topics relevant to the DFIR community and invite guests to discuss what’s new and exciting. Make sure you check out past episodes of the Forensic Lunch here and get caught up in time for the Magnet User Summit.
The participants who receive the top three scores in the CTF will receive the following prizes:
- The CTF Winner will receive a 1-year license of AXIOM, SANS NetWars Continuous, Champlain College Leahy Center for Digital Forensics & Cybersecurity Prize Pack, and a Magnet Forensics prize pack. Additionally, they will be a guest on the Forensic Lunch live from the Magnet User Summit.
- The second-place winner will receive a six-month license of AXIOM, Champlain College Leahy Center for Digital Forensics & Cybersecurity Prize Pack and a Magnet Forensics prize pack.
- The third-place winner will receive Champlain College Leahy Center for Digital Forensics & Cybersecurity Prize Pack and a Magnet Forensics prize pack.
Register Now at https://www.magnetusersummit.com/registration!