Welcome to the DFRWS APAC 2026 Rodeo!

The signal is weak. The stakes are high. The evidence is waiting.

A critical security incident has left behind a trail of digital artifacts. Your mission is to examine
the evidence, connect the clues, and uncover what happened before time runs out.

Think like an analyst. Investigate like a defender. Compete like a team.

List of Tools Required

  1. 7-Zip: https://www.7-zip.org/download.html
  2. Wireshark: https://www.wireshark.org/download.html
  3. Mozilla Thunderbird: https://www.thunderbird.net/en-US/thunderbird/all
  4. CyberChef — downloadable releases for offline use: https://github.com/gchq/CyberChef/releases
  5. Visual Studio Code: https://code.visualstudio.com/download
  6. Notepad++ — alternative text editor: https://notepad-plus-plus.org/downloads/
  7. Autopsy: https://www.autopsy.com/download/
  8. PEview — PE/COFF file viewer by Wayne J. Radburn: http://wjradburn.com/software/
  9. Microsoft Sysinternals Suite: https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite
  10. Python latest: https://www.python.org/downloads/
  11. Log Viewer (Download and install) python file added – Download Link