Rating:

Deleted

We found this file and was told that it contains a flag within it. Can you find the flag?

The file we are given is a .e01 which I loaded with Autopsy.

Once I loaded the file, I checked the 'deleted files' section.

autopsy.png

Inside the file zzooo.png was the flag.

deleted.png

Flag: gigem{f0und_d3l3t3d_f1l3}

Special Thanks to warlocksmurf, was stuck on a Mac and couldn't grab Autopsy screenshots :<

Original writeup (https://seall.dev/posts/tamuctf2024#deleted).