Level 1: MINAF-PC7, 650 / 650 (100%)
100% complete
Level 2: Alert! Emergency!, 750 / 750 (100%)
100% complete
Level 3: We're not happy, 625 / 725 (86%)
86.206896551724% complete
Total: 2,025 / 2,125 (95.3%)
Challenge Solved Points
3.5 The attackers are nice tricksters because they also fooled this user. Which URL did they make him/her click? (Level 3: We're not happy) #30, 4 years, 3 months after release (2026-03-04 16:40:47) 100
3.8 In what time the attackers first set foot on MINAF's O365 infrastructure? (Level 3: We're not happy) #32, 4 years, 3 months after release (2026-03-04 16:38:09) 100
3.7 From which REAL domain was this last attack launched? (Level 3: We're not happy) #37, 4 years, 3 months after release (2026-03-04 16:35:26) 75
3.4 The compromised initial user has been connecting from another countries ... Which one is the most frequent? (Level 3: We're not happy) #42, 4 years, 3 months after release (2026-03-04 16:08:38) 50
3.3 This kind of attack is EXACTLY called ... (Level 3: We're not happy) #37, 4 years, 3 months after release (2026-03-04 15:56:15) 100
3.2 Who fooled this user to install the "thingy" ? (Level 3: We're not happy) #44, 4 years, 3 months after release (2026-03-04 15:54:51) 75
3.1 Attackers have tricked someone to consent the installation of something. What is its name? (Level 3: We're not happy) #43, 4 years, 3 months after release (2026-03-04 15:50:23) 125
2.9 Which in the "innocent" password of the compromised account ? (Level 2: Alert! Emergency!) #41, 4 years, 3 months after release (2026-03-04 15:25:11) 100
2.8 When the attackers did first successfully use the stolen account ? (Level 2: Alert! Emergency!) #44, 4 years, 3 months after release (2026-03-04 15:21:15) 75
2.7 Attackers have left a privileged backdoor to MINAF's O365. Which form does it take? (Level 2: Alert! Emergency!) #39, 4 years, 3 months after release (2026-03-04 15:17:01) 125
2.6 To expand their activities, the attackers have obtained full access to some mailboxes. Which ones? (Level 2: Alert! Emergency!) #39, 4 years, 3 months after release (2026-03-04 15:12:12) 75
2.5 Attackers also created an email rule that filtered out some keywords. Which ones? (Level 2: Alert! Emergency!) #38, 4 years, 3 months after release (2026-03-04 15:03:40) 75
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners? (Level 2: Alert! Emergency!) #41, 4 years, 3 months after release (2026-03-04 15:01:35) 75
2.3 ... and from which IP address? (Level 2: Alert! Emergency!) #41, 4 years, 3 months after release (2026-03-04 14:53:36) 50
2.2. When did the attackers got the World_Happiness_Plan.docx? (Level 2: Alert! Emergency!) #41, 4 years, 3 months after release (2026-03-04 14:44:31) 100
2.1 María José Feliz shared this file with an user ... who reshared it with a third user. Who? (Level 2: Alert! Emergency!) #47, 4 years, 3 months after release (2026-03-04 14:25:27) 75
1.8 How many times have been the compressed payload successfully executed? (Level 1: MINAF-PC7) #42, 4 years, 3 months after release (2026-03-04 12:49:12) 100
1.9 María José Feliz shared this document with other user. Which one? (Level 1: MINAF-PC7) #53, 4 years, 3 months after release (2026-03-04 12:33:02) 75
1.7 Which user advises Maria Jose Files to "install" everything? (Level 1: MINAF-PC7) #64, 4 years, 3 months after release (2026-03-04 12:26:23) 125
1.6 Where did all these malware was downloaded from? (Level 1: MINAF-PC7) #64, 4 years, 3 months after release (2026-03-04 11:55:07) 75
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one? (Level 1: MINAF-PC7) #67, 4 years, 3 months after release (2026-03-04 11:47:51) 50
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final (real) extension is the most used? (Level 1: MINAF-PC7) #78, 4 years, 3 months after release (2026-03-04 11:47:18) 50
1.4 Which payload do these files have? (Level 1: MINAF-PC7) #64, 4 years, 3 months after release (2026-03-04 11:45:09) 75
1.2 Which file generated the most recent AV alert? (Level 1: MINAF-PC7) #75, 4 years, 3 months after release (2026-03-04 11:22:09) 50
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer? (Level 1: MINAF-PC7) #64, 4 years, 3 months after release (2026-03-04 11:10:53) 50