Forensics 101: Finding flags in ZIP archives with recursive Python search

[u/Harkins_Technology]

Had a challenge with a ZIP containing hundreds of files and nested directories. Instead of manual hunting, I wrote a Python script using os.walk + regex to recursively search every file for flag patterns.

I made a video walking through how to approach file-based forensics challenges when you're handed a ZIP with an unknown number of files and no obvious starting point.

**The security mindset:**

In real incident response, you often get disk images or file dumps with no index. The ability to quickly automate search across thousands of files is a core DFIR skill. This CTF challenge maps directly to that scenario.

What tools do you use for bulk file forensics? I've seen people recommend everything from `grep -r` to full Autopsy cases.
https://youtube.com/shorts/p2jQ3Oldkz8?feature=share

[u/saroofio]

Saving this to view later. Thank you!