Forensics 500 challenge from the July 2013 MITRE CTF