Level 1: MINAF-PC7, 650 / 650 (100%)
100% complete
Level 2: Alert! Emergency!, 300 / 750 (40%)
40% complete
Level 3: We're not happy, 625 / 725 (86%)
86.206896551724% complete
Total: 1,575 / 2,125 (74.1%)
Challenge Solved Points
3.8 In what time the attackers first set foot on MINAF's O365 infrastructure? (Level 3: We're not happy) #29, 3 years, 7 months after release (2025-07-09 16:51:27) 100
3.6 Before this successful attack, they tried another one, more sneaky but unsucessful. Could you tell the "code" they used? (Level 3: We're not happy) #20, 3 years, 7 months after release (2025-07-09 16:43:24) 100
3.7 From which REAL domain was this last attack launched? (Level 3: We're not happy) #32, 3 years, 7 months after release (2025-07-09 16:39:13) 75
3.4 The compromised user have connecting from another countries ... Which one is the most frequent? (Level 3: We're not happy) #34, 3 years, 7 months after release (2025-07-09 16:29:04) 50
3.3 This kind of attack is EXACTLY called ... (Level 3: We're not happy) #34, 3 years, 7 months after release (2025-07-09 16:27:07) 100
3.2 Who fooled this user to install the "thingy" ? (Level 3: We're not happy) #39, 3 years, 7 months after release (2025-07-09 16:25:39) 75
3.1 Attackers have tricked someone to consent the installation of something. What is its name? (Level 3: We're not happy) #39, 3 years, 7 months after release (2025-07-09 16:20:10) 125
2.9 Which in the "innocent" password of the compromised account ? (Level 2: Alert! Emergency!) #36, 3 years, 7 months after release (2025-07-09 16:15:20) 100
2.8 When the attackers did first successfully use the stolen account ? (Level 2: Alert! Emergency!) #41, 3 years, 7 months after release (2025-07-09 16:12:16) 75
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners? (Level 2: Alert! Emergency!) #39, 3 years, 7 months after release (2025-07-09 15:14:54) 75
2.3 ... and from which IP address? (Level 2: Alert! Emergency!) #36, 3 years, 7 months after release (2025-07-09 15:00:45) 50
1.9 María José Feliz shared this document with other user. Which one? (Level 1: MINAF-PC7) #50, 3 years, 7 months after release (2025-07-09 14:31:37) 75
1.8 How many times have been the compressed payload successfully executed? (Level 1: MINAF-PC7) #38, 3 years, 7 months after release (2025-07-09 14:31:09) 100
1.7 Which user advises Maria Jose Files to "install" everything? (Level 1: MINAF-PC7) #59, 3 years, 7 months after release (2025-07-09 14:24:07) 125
1.6 Where did all these malware was downloaded from? (Level 1: MINAF-PC7) #61, 3 years, 7 months after release (2025-07-09 14:07:55) 75
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one? (Level 1: MINAF-PC7) #61, 3 years, 7 months after release (2025-07-09 13:41:10) 50
1.4 Which payload do these files have? (Level 1: MINAF-PC7) #58, 3 years, 7 months after release (2025-07-09 13:36:42) 75
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final (real) extension is the most used? (Level 1: MINAF-PC7) #69, 3 years, 7 months after release (2025-07-09 11:34:59) 50
1.2 Which file generated the most recent AV alert? (Level 1: MINAF-PC7) #70, 3 years, 7 months after release (2025-07-09 11:31:02) 50
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer? (Level 1: MINAF-PC7) #62, 3 years, 7 months after release (2025-07-09 11:20:21) 50