Level 1: MINAF-PC7, 650 / 650 (100%)
100% complete
Level 2: Alert! Emergency!, 750 / 750 (100%)
100% complete
Level 3: We're not happy, 725 / 725 (100%)
100% complete
Total: 2,125 / 2,125 (100%)
Challenge Solved Points
3.8 In what time the attackers first set foot on MINAF's O365 infrastructure? (Level 3: We're not happy) #12, 2 years, 9 months after release (2024-09-05 18:31:20) 100
3.7 From which REAL domain was this last attack launched? (Level 3: We're not happy) #16, 2 years, 9 months after release (2024-09-05 18:23:23) 75
3.6 Before this successful attack, they tried another one, more sneaky but unsucessful. Could you tell the "code" they used? (Level 3: We're not happy) #9, 2 years, 9 months after release (2024-09-05 18:22:12) 100
3.5 The attackers are nice tricksters because they also fooled this user. Which URL did they make him/her click? (Level 3: We're not happy) #8, 2 years, 9 months after release (2024-09-05 18:18:20) 100
3.4 The compromised user have connecting from another countries ... Which one is the most frequent? (Level 3: We're not happy) #14, 2 years, 9 months after release (2024-09-05 18:10:54) 50
3.3 This kind of attack is EXACTLY called ... (Level 3: We're not happy) #11, 2 years, 9 months after release (2024-09-05 18:05:26) 100
3.2 Who fooled this user to install the "thingy" ? (Level 3: We're not happy) #16, 2 years, 9 months after release (2024-09-05 18:01:53) 75
3.1 Attackers have tricked someone to consent the installation of something. What is its name? (Level 3: We're not happy) #16, 2 years, 9 months after release (2024-09-05 17:55:21) 125
2.9 Which in the "innocent" password of the compromised account ? (Level 2: Alert! Emergency!) #15, 2 years, 9 months after release (2024-09-05 17:44:24) 100
2.8 When the attackers did first successfully use the stolen account ? (Level 2: Alert! Emergency!) #13, 2 years, 9 months after release (2024-09-05 17:39:54) 75
2.7 Attackers have left a privileged backdoor to MINAF's O365. Which form does it take? (Level 2: Alert! Emergency!) #17, 2 years, 9 months after release (2024-09-05 17:36:32) 125
2.6 To expand their activities, the attackers have obtained full access to some mailboxes. Which ones? (Level 2: Alert! Emergency!) #15, 2 years, 9 months after release (2024-09-05 17:29:09) 75
2.5 Attackers also created an email rule that filtered out some keywords. Which ones? (Level 2: Alert! Emergency!) #13, 2 years, 9 months after release (2024-09-05 17:17:32) 75
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners? (Level 2: Alert! Emergency!) #17, 2 years, 9 months after release (2024-09-05 16:59:45) 75
2.2. When did the attackers got the World_Happiness_Plan.docx? (Level 2: Alert! Emergency!) #22, 2 years, 9 months after release (2024-09-05 16:52:33) 100
2.3 ... and from which IP address? (Level 2: Alert! Emergency!) #22, 2 years, 9 months after release (2024-09-05 16:51:35) 50
2.1 María José Feliz shared this file with an user ... who reshared it with a third user. Who? (Level 2: Alert! Emergency!) #26, 2 years, 9 months after release (2024-09-05 16:30:15) 75
1.8 How many times have been the compressed payload successfully executed? (Level 1: MINAF-PC7) #22, 2 years, 9 months after release (2024-09-05 14:22:05) 100
1.9 María José Feliz shared this document with other user. Which one? (Level 1: MINAF-PC7) #21, 2 years, 9 months after release (2024-09-05 14:15:03) 75
1.7 Which user advises Maria Jose Files to "install" everything? (Level 1: MINAF-PC7) #25, 2 years, 9 months after release (2024-09-05 14:14:12) 125
1.6 Where did all these malware was downloaded from? (Level 1: MINAF-PC7) #25, 2 years, 9 months after release (2024-09-05 13:54:44) 75
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one? (Level 1: MINAF-PC7) #27, 2 years, 9 months after release (2024-09-05 13:36:37) 50
1.4 Which payload do these files have? (Level 1: MINAF-PC7) #30, 2 years, 9 months after release (2024-09-05 13:30:31) 75
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final extension is the most used? (Level 1: MINAF-PC7) #38, 2 years, 9 months after release (2024-09-05 13:27:12) 50
1.2 Which file generated the most recent AV alert? (Level 1: MINAF-PC7) #28, 2 years, 9 months after release (2024-09-05 12:57:01) 50
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer? (Level 1: MINAF-PC7) #26, 2 years, 9 months after release (2024-09-05 12:48:09) 50