Computer Forensics Challenge

Welcome to the CSAW Forensic Challenge. The purpose of the challenge is to give students an opportunity to show to demonstrate their forensics and analysis skills. CSAW Forensic Challenge is similar in format to Honeynet Project's Forensic Challenge.

We will post a disk image of a compromised host, and you are to analyze the disk to unfold a series of events that lead to the attack. The disk image will be release November 1^th, with submissions required by November 7^th noon sharp. Finalists will be announced November 8^th Entries will be judged by their thoroughness of forensic process and analysis. Chosen entries are ranked by the judges and awarded cash prizes at CSAW Award Ceremony. Only groups and persons present at the Ceremony will be awarded prizes.

Last year's Forensics Contest Winners

• First place: Daniel Guido - Polytechnic University
• Second pace: Eugine Levitov & Vladimir Zakharevich - Polytechnic University
• Third place: Pavel Margolin & Stanislav Nurilov - Polytechnic University


• Winning entries submission reports forensics_winners.zip

The winners of the forensics contest will be announced during the CSAW award ceremony on November 9^th from 4:00pm - 6:00pm, held on Dibner Auditorium.

All finalists are invited to the award ceremony, where dinner will be served and the opportunities to network with security experts around the countries.

Directions to Polytechnic University can be found here.

• 1^st prize - $500
• 2^nd prize - $250
• 3^rd prize - $100

• BONUS awards for best undergraduate competitor!!

To register, click here.

Winning Entry from cSAW 2004 Forensics Challenge:

• Konstantin Rozinov, Polytechnic University Winning Entry

SHA1(csaw-fimage.tgz) = f849a1540d55a9ffe2cbcb1bba7ee84a54261416
SHA1(csaw-fimage) = a447e3fdf661e5641dd0f05f56e102cb7b98e470

MD5(csaw-fimage.tgz) = 3787df84ff96496d4885aba56930eea7
MD5(csaw-fimage) = 8531ea3cf110f47cee9abc87c0d2d165

Photos of the winners:

See more photos from the various events...