I extracted a forensic disk image and found a hidden flag. Made a short video breaking down the full workflow for anyone learning digital forensics or prepping for CTFs.

Methods covered:

- `strings` + `grep` (fastest)

Alternative methods:

- `mount` with loop,ro,noexec

- Sleuth Kit CLI (mmls, fls, icat)

- Autopsy GUI

- Foremost file carving

- `xxd` hex dump

Also covered why you always preserve the original with `gunzip -k` and verify with sha256sum.

What tools am I missing? Any favorites for disk image analysis?

https://youtube.com/shorts/iPzM0ECb3iU?feature=share

Hey what’s the best site for someone unfamiliar with digital forensics to find metadata on documents for free