This is my solution to the Forensic 200 challenge from the Trend Micro CTF 2017. I show you how to use Volatility and Ollydbg to find the flag.