Level 1: MINAF-PC7, 475 / 650 (73%)
73.076923076923% complete
Level 2: Alert! Emergency!, 750 / 750 (100%)
100% complete
Level 3: We're not happy, 725 / 725 (100%)
100% complete
Total: 1,950 / 2,125 (91.8%)
Challenge Solved Points
3.8 In what time the attackers first set foot on MINAF's O365 infrastructure? (Level 3: We're not happy) #9, 2 years, 9 months after release (2024-09-05 18:29:21) 100
3.7 From which REAL domain was this last attack launched? (Level 3: We're not happy) #14, 2 years, 9 months after release (2024-09-05 18:23:07) 75
3.6 Before this successful attack, they tried another one, more sneaky but unsucessful. Could you tell the "code" they used? (Level 3: We're not happy) #8, 2 years, 9 months after release (2024-09-05 18:21:52) 100
3.5 The attackers are nice tricksters because they also fooled this user. Which URL did they make him/her click? (Level 3: We're not happy) #10, 2 years, 9 months after release (2024-09-05 18:19:34) 100
3.4 The compromised user have connecting from another countries ... Which one is the most frequent? (Level 3: We're not happy) #13, 2 years, 9 months after release (2024-09-05 18:08:44) 50
3.3 This kind of attack is EXACTLY called ... (Level 3: We're not happy) #16, 2 years, 9 months after release (2024-09-05 18:06:00) 100
3.2 Who fooled this user to install the "thingy" ? (Level 3: We're not happy) #17, 2 years, 9 months after release (2024-09-05 18:02:04) 75
3.1 Attackers have tricked someone to consent the installation of something. What is its name? (Level 3: We're not happy) #15, 2 years, 9 months after release (2024-09-05 17:55:11) 125
2.9 Which in the "innocent" password of the compromised account ? (Level 2: Alert! Emergency!) #16, 2 years, 9 months after release (2024-09-05 17:44:56) 100
2.8 When the attackers did first successfully use the stolen account ? (Level 2: Alert! Emergency!) #14, 2 years, 9 months after release (2024-09-05 17:41:15) 75
2.7 Attackers have left a privileged backdoor to MINAF's O365. Which form does it take? (Level 2: Alert! Emergency!) #12, 2 years, 9 months after release (2024-09-05 17:32:59) 125
2.6 To expand their activities, the attackers have obtained full access to some mailboxes. Which ones? (Level 2: Alert! Emergency!) #11, 2 years, 9 months after release (2024-09-05 17:21:05) 75
2.5 Attackers also created an email rule that filtered out some keywords. Which ones? (Level 2: Alert! Emergency!) #12, 2 years, 9 months after release (2024-09-05 17:14:58) 75
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners? (Level 2: Alert! Emergency!) #14, 2 years, 9 months after release (2024-09-05 16:59:18) 75
2.1 María José Feliz shared this file with an user ... who reshared it with a third user. Who? (Level 2: Alert! Emergency!) #29, 2 years, 9 months after release (2024-09-05 16:55:02) 75
2.2. When did the attackers got the World_Happiness_Plan.docx? (Level 2: Alert! Emergency!) #23, 2 years, 9 months after release (2024-09-05 16:54:01) 100
2.3 ... and from which IP address? (Level 2: Alert! Emergency!) #23, 2 years, 9 months after release (2024-09-05 16:52:09) 50
1.9 María José Feliz shared this document with other user. Which one? (Level 1: MINAF-PC7) #24, 2 years, 9 months after release (2024-09-05 14:25:27) 75
1.7 Which user advises Maria Jose Files to "install" everything? (Level 1: MINAF-PC7) #27, 2 years, 9 months after release (2024-09-05 14:14:19) 125
1.4 Which payload do these files have? (Level 1: MINAF-PC7) #31, 2 years, 9 months after release (2024-09-05 13:35:56) 75
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one? (Level 1: MINAF-PC7) #26, 2 years, 9 months after release (2024-09-05 13:35:43) 50
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final extension is the most used? (Level 1: MINAF-PC7) #28, 2 years, 9 months after release (2024-09-05 12:50:17) 50
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer? (Level 1: MINAF-PC7) #25, 2 years, 9 months after release (2024-09-05 12:47:54) 50
1.2 Which file generated the most recent AV alert? (Level 1: MINAF-PC7) #25, 2 years, 9 months after release (2024-09-05 12:45:03) 50