About the Authors
The Network Forensics Puzzle contest is written by the consulting team of Lake Missoula Group, LLC, including: Sherri Davidoff, Jonathan Ham, Eric Fulton, Randi Price, and Scott Fretheim. We also have occasional guest authors.
Lake Missoula Group offers customized consulting services, including network assessments, penetration tests, web application assessments, forensics and incident response, social engineering tests, policy and procedure review. We provide realistic, maintainable information security strategies, and help organizations effectively prioritize and adapt their pre-existing infrastructure to meet current and future IT security needs. Our core consulting group boasts over 25 years of experience, and hold CISSP, GPEN, GCFA, GWAPT and other certifications. We develop sustainable security strategies, customized to suit your unique environment.
Sherri Davidoff is a founder and senior consultant at Lake Missoula Group, LLC. She has over a decade of experience as an information security professional, specializing in penetration testing, forensics, social engineering testing and web application assessments. She has consulted for a wide variety of industries, including banking, insurance, health care, transportation, manufacturing, academia, and government institutions. Sherri is the co-author of SANS “Network Forensics (For558).” She is a GIAC-certified forensic examiner (GCFA) and penetration tester (GPEN), and holds her degree in Computer Science and Electric Engineering from MIT.
Jonathan Ham specializes in large-scale enterprise security issues, from policy and procedure, to scalable prevention, detection, and response techniques. He’s been commissioned to teach NCIS investigators how to use Snort, performed packet analysis from a facility more than 2000 feet underground, taught intrusion analysis to the NSA, and chartered and trained the CIRT for one of the largest U.S. civilian Federal agencies. Jonathan has helped his clients achieve greater success for over 15 years. He is a Certified Instructor with the SANS Institute, and the co-author and lead instructor of SANS “Network Forensics” (558). Jonathan is a founder and senior consultant at Lake Missoula Group, LLC.











My co worker just showed me your site. I worked on the DC3 this year. I would love to be made aware of the next contest. It seems like a lot of fun.
Hello, I was at the Defcon 19 and I picked up the current puzzle for this year. I was not able to participate in the competition as it was occurring, but I still wanted to play the game. I took a picture of the Keys for truecrypt. I got passed the 1st round, I was about to play the second round but noticed that the password does not work. (!n1c3w0rk). I also tried the passwords for the other rounds and the 5th round doesn’t seem to work as well. Can you please let me know if there is a mistake here somewhere, I would like to go through this puzzle, it is a lot of fun to play. I may play the older puzzles in the mean time, but I hope to get the password for the current one. Also I noticed that there are 7 passwords listed on the sheet. Is this part of the puzzle ? Thanks for challenges.
Dblitz.