3.8 In what time the attackers first set foot on MINAF's O365 infrastructure?
(Level 3: We're not happy)
|
#25,
3 years, 3 months after release (2025-03-05 17:06:28)
|
100 |
3.7 From which REAL domain was this last attack launched?
(Level 3: We're not happy)
|
#29,
3 years, 3 months after release (2025-03-05 17:03:00)
|
75 |
3.4 The compromised user have connecting from another countries ... Which one is the most frequent?
(Level 3: We're not happy)
|
#30,
3 years, 3 months after release (2025-03-05 17:02:28)
|
50 |
3.3 This kind of attack is EXACTLY called ...
(Level 3: We're not happy)
|
#29,
3 years, 3 months after release (2025-03-05 16:48:07)
|
100 |
3.2 Who fooled this user to install the "thingy" ?
(Level 3: We're not happy)
|
#35,
3 years, 3 months after release (2025-03-05 16:39:25)
|
75 |
3.1 Attackers have tricked someone to consent the installation of something. What is its name?
(Level 3: We're not happy)
|
#32,
3 years, 3 months after release (2025-03-05 16:32:46)
|
125 |
2.9 Which in the "innocent" password of the compromised account ?
(Level 2: Alert! Emergency!)
|
#33,
3 years, 3 months after release (2025-03-05 16:28:49)
|
100 |
2.8 When the attackers did first successfully use the stolen account ?
(Level 2: Alert! Emergency!)
|
#26,
3 years, 3 months after release (2025-03-05 16:06:46)
|
75 |
2.7 Attackers have left a privileged backdoor to MINAF's O365. Which form does it take?
(Level 2: Alert! Emergency!)
|
#24,
3 years, 3 months after release (2025-03-05 16:00:41)
|
125 |
2.6 To expand their activities, the attackers have obtained full access to some mailboxes. Which ones?
(Level 2: Alert! Emergency!)
|
#33,
3 years, 3 months after release (2025-03-05 15:55:54)
|
75 |
2.4 The attackes have given themselves permissions over two Sharepoint sites. Who are their owners?
(Level 2: Alert! Emergency!)
|
#34,
3 years, 3 months after release (2025-03-05 15:47:26)
|
75 |
2.5 Attackers also created an email rule that filtered out some keywords. Which ones?
(Level 2: Alert! Emergency!)
|
#22,
3 years, 3 months after release (2025-03-05 15:35:06)
|
75 |
2.3 ... and from which IP address?
(Level 2: Alert! Emergency!)
|
#29,
3 years, 3 months after release (2025-03-05 15:22:20)
|
50 |
2.2. When did the attackers got the World_Happiness_Plan.docx?
(Level 2: Alert! Emergency!)
|
#31,
3 years, 3 months after release (2025-03-05 15:21:46)
|
100 |
2.1 María José Feliz shared this file with an user ... who reshared it with a third user. Who?
(Level 2: Alert! Emergency!)
|
#37,
3 years, 3 months after release (2025-03-05 15:13:10)
|
75 |
1.9 María José Feliz shared this document with other user. Which one?
(Level 1: MINAF-PC7)
|
#41,
3 years, 3 months after release (2025-03-05 15:05:40)
|
75 |
1.8 How many times have been the compressed payload successfully executed?
(Level 1: MINAF-PC7)
|
#29,
3 years, 3 months after release (2025-03-05 14:51:25)
|
100 |
1.7 Which user advises Maria Jose Files to "install" everything?
(Level 1: MINAF-PC7)
|
#48,
3 years, 3 months after release (2025-03-05 14:50:16)
|
125 |
1.6 Where did all these malware was downloaded from?
(Level 1: MINAF-PC7)
|
#44,
3 years, 3 months after release (2025-03-05 12:45:54)
|
75 |
1.5 In that folder there is DEFINITELY another file that Windows Defender strongly dislikes. Which one?
(Level 1: MINAF-PC7)
|
#47,
3 years, 3 months after release (2025-03-05 12:29:22)
|
50 |
1.4 Which payload do these files have?
(Level 1: MINAF-PC7)
|
#39,
3 years, 3 months after release (2025-03-05 12:28:35)
|
75 |
1.1 At which time did María José Feliz create the document "World_Happiness_Plan.docx" on her computer?
(Level 1: MINAF-PC7)
|
#43,
3 years, 3 months after release (2025-03-05 12:16:40)
|
50 |
1.3 If you look carefully in the user folder, you'll see some suspicious compressed files. What final (real) extension is the most used?
(Level 1: MINAF-PC7)
|
#51,
3 years, 3 months after release (2025-03-05 12:10:44)
|
50 |
1.2 Which file generated the most recent AV alert?
(Level 1: MINAF-PC7)
|
#47,
3 years, 3 months after release (2025-03-05 12:00:25)
|
50 |