What SECRETS are in your Clipboard?
Source: YouTube · John Hammond · published Apr 19, 2023 · 17:40
The video demonstrates how to extract clipboard data from a Windows AppData folder during a capture the flag forensic challenge 0:53-1:07 using SQLite tools to decode base64-encoded clipboard history.
Key Takeaways:
• The challenge involves finding a stolen password in an AppData folder after a hacker attack 0:53-1:07
• The host explores clipboard data in AppData\Local\Microsoft\Windows\Clipboard but finds encrypted content 3:15-4:12
• Research leads to discovering the activities_cache.db file which contains clipboard history in a readable format 12:23-12:38
• Using SQLite browser, they extract base64-encoded clipboard payloads and decode them to find the flag 14:33-16:45
This forensic technique demonstrates real-world application for incident response investigations 17:08-17:18.
Sources:
- 0:53-1:07 Introduction of the capture the flag challenge
- 3:15-4:12 Exploration of clipboard directory with encrypted data
- 12:23-12:38 Discovery of activities_cache.db file
- 14:33-16:45 Extracting and decoding the flag from SQLite database
- 17:08-17:18 Conclusion about real-world forensic applications
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Incident Response. Commonly maps to: Security Operations, Security Assessment and Testing. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I played a recent capture of the flag challenge all about Windows forensics and digging out data out of the clipboard what you copy and paste when you're using your computer and I thought it was kind of cool a little bit of hey digital forensics incident response stuff that you might do in the real world more than just hey some cheeky I don't know strings on a file so I want to showcase it in this video get you a little bit in the note on the research and we'll have some fun let's go now I typically play Capture the Flag challenges inside of a c Linux virtual machine to do offensive red team hacker stuff but in this case hey it's probably a little bit more instant response so I am inside of remnux the reverse engineering malare Linux distribution I thought I could showcase this in sift one…