Network Forensics Puzzle 2014

The Triennial Chess Boxing World Title is quickly approaching, and there have been allegations of bribery surrounding where the match will be held. Approximately two months ago, Edward Snowden released some documents on a variety of topics. We hope to find information about the World Title within these documents. As you undoubtedly know, Edward Snowden is currently in Russia trying to avoid the long arm of the U.S. law. Lately, we've received word that Mr. Snowden is working with Julian Assange of Wikileaks. Obviously there are major risks with such a partnership, but we might be able to benefit from this one. As professional forensic analysts, we thought that you might be willing to help us. Your job, should you accept it, will be to investigate these documents and determine who is behind this nefarious scandal. Obviously this will all be confidential, and it goes without saying that this is clearly a matter of national security. Can you solve the case?


This puzzle gets progressively more difficult, making it both a fun challenge for a seasoned network forensics analyst and a great learning tool for a beginner. A walkthrough and solutions are posted on our website, The puzzle is compatible with Mac, Windows, and Linux. All you need is Truecrypt and Wireshark to get started. A list of passwords to decrypt the Truecrypt volumes is enclosed.