diff --git a/_posts/2025-11-19-hackfest-apt-514.md b/_posts/2025-11-19-hackfest-apt-514.md new file mode 100644 index 0000000..442efbe --- /dev/null +++ b/_posts/2025-11-19-hackfest-apt-514.md @@ -0,0 +1,165 @@ +--- +# Editing the below variables is the absolute minimum to get stuff up. Feel +# free [obliged] to add editorial niceties or strip the page if you need to +# include something more complex. +season: 22 +episode: 08 +layout: default +title: HackFest CTF 2025 - APT514 Forensics Case. +# summary for social media cards. Ideal length 55 chars, max 200 +summary: Forensics track from Hackfest CTF 2025 +tags: hackfest, forensics, dfir, windows, logs +date_fr: 2025-11-19 +date_long_fr: Mercredi le 19 novembre 18:00 à 21:00 +date_en: 2025-11-19 +date_long_en: Wednesday november 19th 18:00 to 21:00 +description_fr: > + Cet atelier présentera la track "APT514" du Hackfest CTF 2025. On met son chapeau bleu et on utilisera nos skills forensics pour comprendre la vérité. Windows Forensics! +description_en: > + This workshop will explore "APT514" track from Hackfest CTF 2025. Wearing the blue hat with purpose — mastering the art of forensics to uncover the truth. Windows Forensics! +tools_fr: + - Windows 10/11 + - Eric zimmerman tools. +tools_en: + - Windows 10/11 OS (VM is OK!). + - Eric zimmerman tools. + +presented_by_fr: Défi présenté par [Ahmed Houssem Boualem (Houssem0x1)](https://www.linkedin.com/in/ahmed-houssem-boualem-a07767305) +presented_by_en: Presented by [Ahmed Houssem Boualem (Houssem0x1)](https://www.linkedin.com/in/ahmed-houssem-boualem-a07767305) +featured_img: /images/202511.png +featured_img_alt: Orange cones assembled together typing on a laptop. Caption says "APT514". +location: CyberEco (355 Rue Peel Suites 203-208, Montréal, QC H3C 2G9) +--- + +# Next edition: {{ page.date_en }} +[French version](#french) + +### Season {{ page.season }} Episode {{ page.episode }} + +## {{ page.title }} + +The next edition of Montrehack will be held on {{ page.date_long_en }}. + +![ {{ page.featured_img_alt }} ]( {{ page.featured_img }}#centered) + +{{ page.description_en }} + +{% if page.challenge_assets %} +{::options parse_block_html="true" /} +
+## Challenge Assets +{% for asset in page.challenge_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +{% if page.archived_assets %} +{::options parse_block_html="true" /} +
+## Archives +This edition is over. Here are the archived assets: +{% for asset in page.archived_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +## Tools and Experience Required + +{% for tool in page.tools_en %} +* {{ tool }} +{% endfor %} + +## Where + + +* {{ page.location }} +* Follow the presentation [online on Twitch](https://twitch.tv/montrehack/) +* Participate in teams or on your own [on Discord](https://discord.gg/4qfFwPX) + +## When + +{{ page.date_long_en | capitalize }} + +## How + +* Workshop style +* Bring your own laptop +* Challenges will be analyzed +* Small groups of people can work on each challenge +* Solutions to each challenge will be presented to everyone at the end of the event + +## Credits + +{{ page.presented_by_en }} + + + +# Prochaine édition: {{ page.date_fr }} + +### Saison {{ page.season }} épisode {{ page.episode }} + +## {{ page.title }} + +La prochaine édition de Montréhack aura lieu {{ page.date_long_fr }}. + +![ {{ page.featured_img_alt }}]( {{ page.featured_img }}#centered) + +{{ page.description_fr }} + +{% if page.challenge_assets %} +{::options parse_block_html="true" /} +
+## Challenge Assets +{% for asset in page.challenge_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +{% if page.archived_assets %} +{::options parse_block_html="true" /} +
+## Les Archives +Cette édition est terminé, voici les archives: +{% for asset in page.archived_assets %} +* [ {{ asset.name }} ]({{ asset.url }}) +{% endfor %} +
+{% endif %} + +## Outils et expérience requis + +{% for tool in page.tools_fr %} +* {{ tool }} +{% endfor %} + +## Où + +* {{ page.location }} +* Suivez la présentation [en ligne sur Twitch](https://twitch.tv/montrehack/) +* Participez seul ou en équipe [sur Discord](https://discord.gg/4qfFwPX) + +## Quand + +{{ page.date_long_fr | capitalize}} + +## Comment + +* Formule atelier +* Apportez votre ordinateur portable +* Des problèmes seront étudiés et expliqués +* Chaque problème sera analysé en petits groupes +* Les solutions seront présentées avec tout le monde à la fin de la rencontre + +## Remerciements + +{{ page.presented_by_fr }} + +
+### Sponsors // Partenaires + +[![NorthSec](/images/nsec_logo.png)](https://nsec.io/) + +Interested to sponsor or present a challenge? [Contact us here](https://docs.google.com/forms/d/e/1FAIpQLSecc0vfe3pIwMJjIBCYW4G43ZwtagwVESu_qHKnglnBc3R3ww/viewform?usp=sf_link). \ No newline at end of file diff --git a/images/202511.png b/images/202511.png new file mode 100755 index 0000000..80a93f7 Binary files /dev/null and b/images/202511.png differ