Level 1: Domain controller, 525 / 850 (62%)
61.764705882353% complete
Level 2: W10-PC3, 0 / 1,050 (0%)
0% complete
Level 3: W10-PC5, 0 / 1,150 (0%)
0% complete
Total: 525 / 3,050 (17.2%)
Challenge Solved Points
08. The GPO establish a fixed time for ransomware execution. Which time are the scheduled tasks of doom timed to start? (Level 1: Domain controller) #129, 4 years, 7 months after release (2025-07-08 16:31:41) 75
07. Which ransomware family are the attackers planning to deploy? (Level 1: Domain controller) #133, 4 years, 7 months after release (2025-07-08 16:31:11) 50
06. Which specific threat is launched by the AV detection? (Level 1: Domain controller) #108, 2 years, 4 months after release (2025-07-08 15:58:59) 75
05. The antivirus detected a malicious file around this time. Which name does it have? (Level 1: Domain controller) #142, 4 years, 7 months after release (2025-07-08 15:42:01) 50
04. A foul-mouthed named script was executed a little after this user login. What is its name? (Level 1: Domain controller) #139, 4 years, 7 months after release (2025-07-08 15:34:44) 50
03. At what time can you see a logon type 10 user login on the domain controller? (Level 1: Domain controller) #141, 4 years, 7 months after release (2025-07-08 15:06:03) 50
02. At which time can the second malicious GPO be considered as loaded and ready to be applied? (Level 1: Domain controller) #143, 4 years, 7 months after release (2025-07-08 14:47:04) 100
01- What is the name of the first anomalous GPO? (Level 1: Domain controller) #137, 2 years, 4 months after release (2025-07-08 14:43:46) 75