Tools

Threat Detective

Trainee Investigator0/39 cases

Case files

Trainee: Clear-cut incidents, three options, every piece of evidence matters, strong hints.

Recommended next

The Locked Files

school office

C RANSOM 1

The Locked Files

school office

Several employees report that documents have suddenly become unavailable. Shortly afterwards, a message appears demanding payment before access will supposedly be restored.

C VIRUS 1

The Shared Spreadsheet

small business

A spreadsheet used by several staff has started behaving oddly. Colleagues who opened a copy of the same file report the same problem.

C WORM 1

It Spread By Itself

college

A standalone unwanted program is detected on one machine. Shortly afterwards, similar activity appears on several connected devices, even though nobody transferred anything between them.

C TROJAN 1

The Helpful Utility

home user

A user downloads a program that appears to be a legitimate utility for tidying up files. After installation, unexpected hidden behaviour is detected.

C ADWARE 1

Pop-ups In The Library

library

Public computers in the reading room have started showing advertising that the library did not put there.

C PHISH 1

Verify Your Account

school office

An office administrator received a message about an account problem and wants to know whether it is genuine.

C PRETEXT 1

The Support Team Caller

small business

A member of staff received a telephone call from someone claiming to work for the company's IT support team.

C QUID 1

Free Help, One Small Favour

college

A student was offered free technical help with a slow laptop, on one condition.

C SHOULDER 1

The Person Behind

library

A library user reports that someone stood unusually close while they signed in at a public terminal.

C WHITE 1

The Agreed Security Review

online shop

A specialist was asked to review the security of a shop's website. The shop wants the activity classified correctly.