# CTF / Challenges

- [13Cubed Linux memory forensics](https://www.iblue.team/ctf-challenges/13cubed-linux-memory-forensics.md): 13Cubed have provided a memory sample from an Ubuntu host for participants to practice their Linux memory analysis skills.
- [13Cubed Windows memory forensics](https://www.iblue.team/ctf-challenges/13cubed-windows-memory-forensics.md)
- [Compromised Windows Server 2022 (simulation)](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation.md): This series of pages will examine a data set provided by Benjamin Donnachie involving a compromised Windows Server 2022 (simulation data)
- [FTK Imager](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation/ftk-imager.md): How to use FTK Imager to verify, inspect, and export data from an image
- [Autopsy Forensics](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation/autopsy-forensics.md): How to use Autopsy to process and examine the Compromised Windows Server 2022 image.
- [Plaso](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation/plaso.md): How to process an image using log2timeline/plaso
- [Events Ripper](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation/events-ripper.md): How to process Windows event logs from E01 using Events Ripper
- [EZ tools](https://www.iblue.team/ctf-challenges/compromised-windows-server-2022-simulation/ez-tools.md): How to process and interpret various artefacts using the EZ tools suite.
- [DEFCON 2019 forensics](https://www.iblue.team/ctf-challenges/defcon-2019-forensics.md): This is a brief write up for the DEFCON 2019 forensics CTF
- [Tomcat shells](https://www.iblue.team/ctf-challenges/tomcat-shells.md)
- [Magnet Weekly CTF](https://www.iblue.team/ctf-challenges/magnet-weekly-ctf-challenge.md)
- [Magnet CTF Week 0](https://www.iblue.team/ctf-challenges/magnet-weekly-ctf-challenge/magnet-ctf-week-1.md)
- [Magnet CTF Week 1](https://www.iblue.team/ctf-challenges/magnet-weekly-ctf-challenge/magnet-ctf-week-1-1.md)
- [DFIR Madness CTF](https://www.iblue.team/ctf-challenges/dfir-madness-ctf-challenges.md)
- [Case 001 - Szechuan Sauce](https://www.iblue.team/ctf-challenges/dfir-madness-ctf-challenges/case-001-szechuan-sauce.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.iblue.team/ctf-challenges.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.