# Forensics

- [Volatile](/writeups/ctfs/nahamcon/forensics/volatile.md)
- [Microsooft](/writeups/ctfs/nahamcon/forensics/microsooft.md)
- [Cow Pie](/writeups/ctfs/nahamcon/forensics/cow-pie.md)
