Welcome to the Digital Forensics Challenge. The purpose of the challenge is to give students an opportunity to demonstrate their forensic and analysis skills.

You can now start this competition!
The SysAdmin Report succintly describes what happened prior to incident and what the image is. There are some hints as to what tools you can use in the Forensics section of references.

Submission
E-mail your reports and address your questions to csaw_forensics@isis.poly.edu

Contest Type
Individual (no teams). This contest can be done remotely. However, all finalists are required to attend the award ceremony on December 4th at Polytechnic University where the prize winners will be announced. Students who need to travel more than 100 miles will be given a lump-sum scholarship to offset their travel costs.

Dates
Nov 1 - start: image and other files posted.
Nov 15 - end: reports due.
Nov 21 - results: finalists announced.

Rules
We will post a disk image of a compromised host, and you are to analyze the disk to unfold a series of events that lead to the attack. You need to present your results in a clear and concise manner.

Judging Criteria
Entries will be judged by their thoroughness of forensic process and analysis. The judges will rate participants in the following categories: clarity, structure, adequacy of data recovery, events discovery, adequacy of supporting evidence, relevance of details, degree of detail, validuty of arguments, depth of analysis, etc. Chosen entries are ranked by the judges and awarded cash prizes at CSAW Award Ceremony.

FAQ
As questions arise, answers will be posted here. Please direct questions to csaw@isis.poly.edu.

• 1^st Place: $500
• 2^nd Place: $250
• 3^rd Place: $100