Điều tra an ninh mạng
16 vụ sự cố tại các công ty mô phỏng. Lọc theo độ khó, rồi giải một vụ ngay trong trình duyệt.
| 1Your First Case NotePractice saving an observation and using it to support a finding. | Dễ |
| 2The Unwanted ConnectionSeparate a legitimate payment connection from an unwanted order export. | Trung bình |
| 3Two Copies of One ProgramFind matching files on two workstations and prove neither copy returns. | Trung bình |
| 4The Stolen Support LoginTrace a server intrusion to a stolen login and stop the next step. | Trung bình |
| 5The Forgotten ContractorFollow a login after a contract ended and close the forgotten account. | Dễ |
| 6A Permission Too FarRemove unapproved administration access while the manager keeps working. | Dễ |
| 7One Unprotected AdminFind the missing MFA protection among two administration accounts. | Dễ |
| 8The Rule That Did NothingExplain why a deny rule is ignored and fix it without cutting off support. | Trung bình |
| 9The Backup Caught in the BlockRestore an approved backup without reopening a leak on the same port. | Trung bình |
| 10After the RestartCatch an unwanted startup before a stopped program returns. | Trung bình |
| 11The Program Behind ItFollow a parent process to the launcher that keeps bringing an exporter back. | Trung bình |
| 12Before You ReconnectPreserve live evidence and safely recover an isolated workstation. | Trung bình |
| 13The Wrong File Was IsolatedUse file fingerprints to reverse a mistaken quarantine and remove the real threat. | Trung bình |
| 14A Second Way OutFind an alternate export route that a single-port fix would miss. | Trung bình |
| 15Stop the Second HopStop a compromised workstation from launching a program on the shop server. | Khó |
| 16The Incident HandoffCombine account, process and file evidence to finish a two-machine incident. | Khó |