Loading
Sahyog Bank's finance team had a bad morning. At 09:12, Priya in accounts received an email about an overdue invoice. She clicked the link. By lunch, the security team saw strange traffic leaving the network.
You are the junior analyst on call. You are given three log streams from that morning: the mail gateway, the web proxy, and the endpoint agent. Somewhere in them is the full story of the attack.
Find and submit:
Hostnames look like ws-fin-012. Click any log line to copy its timestamp into the answer box. No special software needed, just careful reading.
This challenge only. All names, addresses and data are fictional. Do not test any real system.
Stuck? Open hints in order: a nudge, then the next step, then an explicit pointer. Costs are taken from this solve's points.
Sign in to open hints.
Filter and search the logs, then pin the events that matter. Pinned events build your timeline.
Showing 59 of 59 events
Structured answers are graded at once. The report is saved with your account.
Sign in to submit.
Ask for help with this challenge. The mentor explains ideas and gives hints. It never gives the flag.
Sign in to ask the mentor.
Sign in, then solve this challenge or give up on it to read write-ups.