Level 1: MINAF-PC7, 650 / 650 (100%)
100% complete
Level 2: Alert! Emergency!, 750 / 750 (100%)
100% complete
Level 3: We're not happy, 725 / 725 (100%)
100% complete
Total: 2,125 / 2,125 (100%)
Challenge Solved Points
3.8 In what time the attackers first set foot on MINAF's O365 infrastructure? (Level 3: We're not happy) #31, 4 years, 3 months after release (2026-03-04 16:37:24) 100
3.7 From which REAL domain was this last attack launched? (Level 3: We're not happy) #35, 4 years, 3 months after release (2026-03-04 16:16:14) 75
3.5 The attackers are nice tricksters because they also fooled this user. Which URL did they make him/her click? (Level 3: We're not happy) #26, 4 years, 3 months after release (2026-03-04 16:13:16) 100
3.4 The compromised initial user has been connecting from another countries ... Which one is the most frequent? (Level 3: We're not happy) #39, 4 years, 3 months after release (2026-03-04 16:03:00) 50
3.3 This kind of attack is EXACTLY called ... (Level 3: We're not happy) #40, 4 years, 3 months after release (2026-03-04 16:00:28) 100
3.2 Who fooled this user to install the "thingy" ? (Level 3: We're not happy) #43, 4 years, 3 months after release (2026-03-04 15:52:48) 75
3.1 Attackers have tricked someone to consent the installation of something. What is its name? (Level 3: We're not happy) #44, 4 years, 3 months after release (2026-03-04 15:50:55) 125
2.9 Which in the "innocent" password of the compromised account ? (Level 2: Alert! Emergency!) #42, 4 years, 3 months after release (2026-03-04 15:45:36) 100
2.7 Attackers have left a privileged backdoor to MINAF's O365. Which form does it take? (Level 2: Alert! Emergency!) #40, 4 years, 3 months after release (2026-03-04 15:24:27) 125
2.8 When the attackers did first successfully use the stolen account ? (Level 2: Alert! Emergency!) #43, 4 years, 3 months after release (2026-03-04 15:16:03) 75
2.6 To expand their activities, the attackers have obtained full access to some mailboxes. Which ones? (Level 2: Alert! Emergency!) #40, 4 years, 3 months after release (2026-03-04 15:13:25) 75
2.5 Attackers also created an email rule that filtered out some keywords. Which ones? (Level 2: Alert! Emergency!) #39, 4 years, 3 months after release (2026-03-04 15:10:45) 75
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners? (Level 2: Alert! Emergency!) #42, 4 years, 3 months after release (2026-03-04 15:06:12) 75
2.3 ... and from which IP address? (Level 2: Alert! Emergency!) #40, 4 years, 3 months after release (2026-03-04 14:51:52) 50
2.2. When did the attackers got the World_Happiness_Plan.docx? (Level 2: Alert! Emergency!) #40, 4 years, 3 months after release (2026-03-04 14:43:14) 100
2.1 María José Feliz shared this file with an user ... who reshared it with a third user. Who? (Level 2: Alert! Emergency!) #48, 4 years, 3 months after release (2026-03-04 14:32:00) 75
1.9 María José Feliz shared this document with other user. Which one? (Level 1: MINAF-PC7) #56, 4 years, 3 months after release (2026-03-04 14:29:52) 75
1.8 How many times have been the compressed payload successfully executed? (Level 1: MINAF-PC7) #43, 4 years, 3 months after release (2026-03-04 14:17:13) 100
1.7 Which user advises Maria Jose Files to "install" everything? (Level 1: MINAF-PC7) #66, 4 years, 3 months after release (2026-03-04 12:35:11) 125
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one? (Level 1: MINAF-PC7) #68, 4 years, 3 months after release (2026-03-04 11:48:10) 50
1.6 Where did all these malware was downloaded from? (Level 1: MINAF-PC7) #63, 4 years, 3 months after release (2026-03-04 11:47:15) 75
1.4 Which payload do these files have? (Level 1: MINAF-PC7) #62, 4 years, 3 months after release (2026-03-04 11:42:47) 75
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final (real) extension is the most used? (Level 1: MINAF-PC7) #77, 4 years, 3 months after release (2026-03-04 11:32:11) 50
1.2 Which file generated the most recent AV alert? (Level 1: MINAF-PC7) #77, 4 years, 3 months after release (2026-03-04 11:26:50) 50
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer? (Level 1: MINAF-PC7) #67, 4 years, 3 months after release (2026-03-04 11:24:50) 50