I received a suspicious email with a very weird looking attachment. It keeps on asking me to “enable macros”. What are those?

Use Splunk to investigate the ransomware activity.

An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.

Challenge room to investigate a compromised host.

Investigate anomalies using Splunk.

Put your ELK knowledge together and investigate an incident.

Investigate the case of the missing ransomware.

Room: https://tryhackme.com/room/mondaymonitor

Check out our new cloud service, Authentication Anywhere. Can you find other user’s secrets?

Want to hear some lo-fi beats, to relax or study to? We’ve got you covered!