NovaTech Solutions Insider Threat Investigation · DFIR CTF Academy
25
Questions
45 min
Duration
60%
Pass mark
Active
Anti-cheat
Case scenario
NovaTech Solutions, Austin, Texas. Senior developer Alex Mercer resigned on 14 March 2024. Days later, a competitor released a product suspiciously similar to NovaTech's unreleased software. IT Security imaged his workstation NOVATECH-WS042 (Windows 10 Pro) and collected browser artifacts, registry hives, and event logs. You are the assigned forensic analyst. All questions are based on this investigation.
Topics covered
DF FundamentalsEvidence AcquisitionChain of CustodyFile Systems & NTFSWindows ArtifactsRegistry ForensicsBrowser ForensicsEvent LogsTimeline AnalysisReportingFTK ImagerAutopsyEZ Tools
Exam rules — read before starting
25 questions drawn randomly from a 60-question bank · 1 mark each · no negative marking
45 minutes · timer starts the moment you click Begin
Right-click and copy/paste are disabled during the exam
One email = one attempt · no retakes
Questions and answer options are randomised for every session
Your submission is recorded and sent to your instructor automatically
Please enter a valid email address.
DF
Operation: Silent Exit — DFIR CTF
0 / 25 answered
0 / 3 violations
45:00
Quick navigation — click any number to jump
DF
DFIR CTF Academy
Assessment submitted
Complete
Operation: Silent Exit · DFIR CTF Assessment
Correct
Incorrect
Skipped
Submission summary
Candidate
Roll / Student ID
Department
Questions answered
Violations recorded
Time taken
Result
Correct answers are not shown here. Your instructor will review all results and contact shortlisted candidates. Your full submission has been recorded securely.
Your answer sheet
Submit assessment?
Are you sure? You cannot change answers after submission.
Violation detected!
You switched away from the exam window. This has been recorded.