Comments on: Puzzle #4: The Curious Mr. X http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x "No Hard Drive? No Problem!" Tue, 20 Jul 2010 16:23:15 +0000 hourly 1 http://wordpress.org/?v=3.0 By: sherri http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-192 sherri Thu, 04 Feb 2010 20:11:44 +0000 http://forensicscontest.com/?p=396#comment-192 Hi guys, The most important part! We'll be announcing the prize early next week :) sherri Hi guys,

The most important part! We’ll be announcing the prize early next week :)

sherri

]]> By: Sébastien DAMAYE http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-191 Sébastien DAMAYE Thu, 04 Feb 2010 12:47:16 +0000 http://forensicscontest.com/?p=396#comment-191 Any idea yet about the prize? Any idea yet about the prize?

]]> By: Alexandre http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-190 Alexandre Thu, 04 Feb 2010 10:30:04 +0000 http://forensicscontest.com/?p=396#comment-190 Sherri, how about the prizes??? :) SANS conference tickets? Sherri, how about the prizes??? :)

SANS conference tickets?

]]> By: Tom http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-189 Tom Thu, 04 Feb 2010 03:10:04 +0000 http://forensicscontest.com/?p=396#comment-189 You've ruined my plan to use the time between your contests to work on this year's Underhanded C contest! I was counting on at least a month between contests! You spoil us! You’ve ruined my plan to use the time between your contests to work on this year’s Underhanded C contest! I was counting on at least a month between contests! You spoil us!

]]> By: sherri http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-188 sherri Thu, 04 Feb 2010 01:41:07 +0000 http://forensicscontest.com/?p=396#comment-188 Tim -- Yes, definitely! We encourage people to submit all kinds of solutions, and we publish the names of everyone who gets the correct answer, regardless of how you achieved it. If you're competing for the prize, you will need to create an automated solution of some kind. That said, we love reading well-thought-out writeups of manual analysis, and we encourage you to post your methods on your blogs (after the deadline, of course). There is a lot to be learned from manual analysis. Tim — Yes, definitely! We encourage people to submit all kinds of solutions, and we publish the names of everyone who gets the correct answer, regardless of how you achieved it. If you’re competing for the prize, you will need to create an automated solution of some kind. That said, we love reading well-thought-out writeups of manual analysis, and we encourage you to post your methods on your blogs (after the deadline, of course).

There is a lot to be learned from manual analysis.

]]> By: Tim Naami http://forensicscontest.com/2010/02/03/puzzle-4-the-curious-mr-x/comment-page-1#comment-185 Tim Naami Thu, 04 Feb 2010 00:14:02 +0000 http://forensicscontest.com/?p=396#comment-185 Is it worth submitting a solution that uses a MANUAL search of the PCAP file with Wireshark? Or do we have to automate the process? Is it worth submitting a solution that uses a MANUAL search of the PCAP file with Wireshark? Or do we have to automate the process?

]]>