> ## Documentation Index
> Fetch the complete documentation index at: https://writeups.dudji.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DFIR

> Digital forensics and incident response Sherlock writeups.

<CardGroup cols={2}>
  <Card title="Vantage" img="https://mintcdn.com/dudji-2c6e4328/iS0VVf3n3y9Vpti2/images/sherlocks/vantage.png?fit=max&auto=format&n=iS0VVf3n3y9Vpti2&q=85&s=14150afa32f2d4afba4ef6d7eff20b9c" icon="magnifying-glass" href="/sherlocks/dfir/vantage" width="1536" height="1024" data-path="images/sherlocks/vantage.png">
    HTB Sherlock Vantage full DFIR investigation writeup.
  </Card>

  <Card title="Brutus" img="https://mintcdn.com/dudji-2c6e4328/iS0VVf3n3y9Vpti2/images/sherlocks/brutus.png?fit=max&auto=format&n=iS0VVf3n3y9Vpti2&q=85&s=6b7747ce8a870111a044dff205d03825" icon="terminal" href="/sherlocks/dfir/brutus" width="1536" height="1024" data-path="images/sherlocks/brutus.png">
    HTB Sherlock Brutus auth.log and wtmp DFIR investigation.
  </Card>
</CardGroup>