TryHackMe File System Forensics

@badal747

Hello, I have hands-on experience with Digital Forensics & Incident Response using tools like Autopsy, Sleuth Kit, Volatility, and native Linux utilities. I previously completed a tested DFIR project for a client involving filesystem analysis, log extraction, persistence identification, timeline reconstruction, and incident reporting. For your TryHackMe incident lab, I will provide: • Detailed walkthrough with commands and evidence • Professional incident report with IOCs and remediation • Clear containment, eradication, and recovery recommendations Estimated turnaround: 24–48 hours after access is shared.

@derdliasiq

Subject: Expert Analysis for TryHackMe File System Forensics Hi there, I am a Cybersecurity Specialist with extensive, hands-on experience in Linux environments, incident response, and digital forensics. I am very familiar with the TryHackMe platform and can rapidly execute the clear, evidence-driven analysis your incident lab requires. For this project, I will: Systematically extract and analyze the necessary file system artifacts. Provide clear and detailed documentation of the evidence found. Deliver actionable incident-handling recommendations based on the findings. I am ready to access the assigned TryHackMe room and begin the investigation immediately. Let's get this solved. Best regards, Eyvazov Bərzamin

@legiahan1606

I have hands-on experience with Linux, Windows administration, log analysis, and security labs. I am familiar with forensic tools such as Autopsy, Sleuth Kit, and Volatility and can provide a detailed investigation report including timeline analysis, indicators of compromise, and remediation recommendations.

@dineshaswins

Hello, I am an eJPT-certified cybersecurity student with hands-on experience in digital forensics, malware analysis, Linux systems, and incident response. I can perform the complete filesystem investigation for your TryHackMe lab and deliver clear, evidence-based findings. For this project, I will: • Analyze the filesystem and recover relevant artefacts • Review logs and identify suspicious activity • Build a timeline of events leading to the compromise • Identify persistence mechanisms and root cause • Document indicators of compromise (IOCs) • Provide containment, eradication, and recovery recommendations Tools I commonly use include Autopsy, Sleuth Kit, Volatility (if memory artefacts are available), Linux forensic utilities, grep, journalctl, and timeline analysis tools. Deliverables: 1. Detailed walkthrough (PDF or Markdown) with commands, methodology, findings, and screenshots where relevant. 2. Professional incident report covering impact, timeline, IOCs, root cause, and remediation actions. 3. Optional follow-up discussion to answer any questions. I focus on producing well-documented, reproducible investigations rather than simply solving the room. My goal is to provide a report that clearly explains what happened, how it happened, and how to prevent similar incidents in the future. I can start immediately upon receiving access and expect to deliver the completed analysis within 24 hours. Looking forward to working with you.

@gauravm92

Hello, I am a Cyber Security and Digital Forensics graduate with experience in filesystem forensics, incident response, and forensic reporting. I can perform a complete analysis of the assigned TryHackMe room, including artifact recovery, log analysis, timeline creation, persistence identification, root cause analysis, and incident response recommendations. I primarily use Autopsy, Sleuth Kit, Volatility, and native Linux forensic tools. Deliverables will include a detailed walkthrough, incident report, IOCs, remediation recommendations, and supporting screenshots where required. Estimated turnaround time: 24–48 hours after receiving access. I look forward to assisting with this investigation. Best Regards, Gaurav Mandal