JXXIII es

Level 1: Domain controller, 500 / 850 (59%)
58.823529411765% complete
Level 2: W10-PC3, 0 / 1,050 (0%)
0% complete
Level 3: W10-PC5, 0 / 1,150 (0%)
0% complete
Total: 500 / 3,050 (16.4%)

Solved challenges

Challenge Solved Points
09. What is the IP used by the attackers to connect to the domain controller ? (Level 1: Domain controller) #64, 3 years, 9 months after release (2024-09-04 18:54:49) 25
08. The GPO establish a fixed time for ransomware execution. Which time are the scheduled tasks of doom timed to start? (Level 1: Domain controller) #57, 3 years, 9 months after release (2024-09-04 18:50:15) 75
06. Which specific threat is launched by the AV detection? (Level 1: Domain controller) #41, 1 year, 6 months after release (2024-09-04 18:25:57) 75
05. The antivirus detected a malicious file around this time. Which name does it have? (Level 1: Domain controller) #71, 3 years, 9 months after release (2024-09-04 18:16:47) 50
04. A foul-mouthed named script was executed a little after this user login. What is its name? (Level 1: Domain controller) #68, 3 years, 9 months after release (2024-09-04 17:22:56) 50
03. At what time can you see a logon type 10 user login on the domain controller? (Level 1: Domain controller) #73, 3 years, 9 months after release (2024-09-04 16:42:08) 50
02. At which time can the second malicious GPO be considered as loaded and ready to be applied? (Level 1: Domain controller) #66, 3 years, 9 months after release (2024-09-04 16:29:02) 100
01- What is the name of the first anomalous GPO? (Level 1: Domain controller) #61, 1 year, 6 months after release (2024-09-04 16:22:35) 75