← all write-ups

Forensic analysis of crafted Excel files

CHALLENGE
Crafted spreadsheet files
CATEGORY
File and artefact forensics
TOOLS
—
STATUS
Draft

DRAFT — the walkthrough below is not yet written. Add your real tools, steps, evidence and result before publishing. Never publish invented steps or flags.

Summary

I analysed forensic Excel files to extract hidden artefacts. The challenge was built around spreadsheets that were not what they appeared to be — the interesting data was concealed inside the file, and finding it meant treating the document as evidence rather than as a spreadsheet.

Tools

Add the exact tools you used (for example archive utilities, hex editors, or forensic scripting).

Steps

Write the walkthrough in order: how the files were examined, where the hidden data lived, and how it was extracted and verified.

  1. Examine the file structure before opening it — fill in
  2. Locate the hidden artefacts — fill in
  3. Extract and decode the data — fill in
  4. Verify the finding and recover the flag — fill in

Result

Add what artefacts you recovered and how the challenge was solved.

Lesson learned

Add the transferable lesson — for example a file-handling habit you would bring to a real forensic examination.

This is the work behind the “file and artefact forensics” field on the coverage map — one of six fields backed by hands-on experience.