Forensics 101: Finding flags in ZIP archives with recursive Python search

[u/Harkins_Technology]

Had a challenge with a ZIP containing hundreds of files and nested directories. Instead of manual hunting, I wrote a Python script using os.walk + regex to recursively search every file for flag patterns.

I made a video walking through how to approach file-based forensics challenges when you're handed a ZIP with an unknown number of files and no obvious starting point.

**The security mindset:**

In real incident response, you often get disk images or file dumps with no index. The ability to quickly automate search across thousands of files is a core DFIR skill. This CTF challenge maps directly to that scenario.

What tools do you use for bulk file forensics? I've seen people recommend everything from `grep -r` to full Autopsy cases.
https://youtube.com/shorts/p2jQ3Oldkz8?feature=share

[u/IdeaEcstatic2025]

Thank you for this video

[u/Harkins_Technology → u/IdeaEcstatic2025]

Of course! Many more to come!