refactor(blue): renommage 2-Blue-Team-Memory-Forensics + correction d… - #7
Merged
Merged
Conversation
…e l'outil d'analyse dans le guide joueur
There was a problem hiding this comment.
Pull request overview
Cette PR renomme le challenge Blue-Team-Memory-Forensics en 2-Blue-Team-Memory-Forensics et met à jour/complète l’écosystème du challenge (outils d’analyse “mini‑Volatility”, génération d’artefacts, conteneurisation, docs et solution) afin d’aligner l’expérience joueur avec le format pédagogique du dump mémoire.
Changes:
- Déplacement/renommage du guide joueur vers
challenges/2-Blue-Team-Memory-Forensics/docs/USER_GUIDE.mdavec des instructions corrigées (usage detools/vol_analyzer.py). - Ajout des outils d’analyse (
tools/vol_analyzer.py,tools/extract_strings.py) et des scripts de génération (setup/generate_challenge.py,setup/generate_pcap.py), ainsi que du packaging Docker associé. - Ajout de supports “solution/validation/reporting” (solution complète, script de validation, template de rapport).
Reviewed changes
Copilot reviewed 4 out of 17 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| challenges/Blue-Team-Memory-Forensics/docs/USER_GUIDE.md | Suppression de l’ancien guide joueur (remplacé par la version sous le nouveau chemin). |
| challenges/2-Blue-Team-Memory-Forensics/tools/vol_analyzer.py | Ajout d’un outil CLI type “mini‑Volatility” pour lire le dump pédagogique et fournir les commandes windows.*. |
| challenges/2-Blue-Team-Memory-Forensics/tools/extract_strings.py | Ajout d’un utilitaire d’extraction/tri de strings (ASCII/UTF‑16LE), avec décodage automatique des fichiers .b64. |
| challenges/2-Blue-Team-Memory-Forensics/solution/validate_flag.py | Ajout d’un validateur/scoring local basé sur SHA256 pour éviter le spoil des réponses. |
| challenges/2-Blue-Team-Memory-Forensics/solution/SOLUTION.md | Ajout de la solution complète (walkthrough + IoC). |
| challenges/2-Blue-Team-Memory-Forensics/setup/requirements.txt | Ajout d’un fichier de dépendances pour les scripts de génération. |
| challenges/2-Blue-Team-Memory-Forensics/setup/generate_pcap.py | Ajout d’un générateur PCAP bonus (DNS + HTTP beacon + exfil) pour corrélation réseau. |
| challenges/2-Blue-Team-Memory-Forensics/setup/generate_challenge.py | Ajout du générateur de dump mémoire pédagogique et de hints.txt. |
| challenges/2-Blue-Team-Memory-Forensics/report/report_template.md | Ajout d’un template de rapport d’analyse mémoire pour les joueurs. |
| challenges/2-Blue-Team-Memory-Forensics/README.md | Mise à jour de la structure/documentation en cohérence avec le nouveau nom de dossier. |
| challenges/2-Blue-Team-Memory-Forensics/docs/USER_GUIDE.md | Nouveau guide joueur expliquant le format pédagogique et l’usage de vol_analyzer.py. |
| challenges/2-Blue-Team-Memory-Forensics/docs/ADMIN_DEPLOYMENT.md | Mise à jour du chemin de build/déploiement suite au renommage. |
| challenges/2-Blue-Team-Memory-Forensics/Dockerfile | Ajout du build multi-stage (génération artefacts puis image finale avec outils). |
| challenges/2-Blue-Team-Memory-Forensics/docker-entrypoint.sh | Ajout d’un entrypoint (serveur HTTP + bannière + mode interactif/CTFd). |
| challenges/2-Blue-Team-Memory-Forensics/docker-compose.yml | Ajout d’un compose pour usage local (volume de report). |
| challenges/2-Blue-Team-Memory-Forensics/.gitignore | Ajout d’exclusions pour artefacts générés/extraits. |
| challenges/2-Blue-Team-Memory-Forensics/.dockerignore | Exclusions de build (solution complète, caches, artefacts locaux, etc.). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Jacob-dot-bit
added a commit
that referenced
this pull request
Jul 20, 2026
…akub refactor(blue): renommage 2-Blue-Team-Memory-Forensics + correction d…
Jacob-dot-bit
added a commit
that referenced
this pull request
Jul 20, 2026
…akub refactor(blue): renommage 2-Blue-Team-Memory-Forensics + correction d…
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
…e l'outil d'analyse dans le guide joueur