new

Capture The Flag

Defensive

New Threat Range Scenario - ClickRat

ClickRat simulates a real-world SOC investigation into an Active Directory workstation compromise orchestrated by an Initial Access Broker (IAB).
After being lured to a convincing but deceptive Web portal, an MIRAI HR staff member unknowingly sets off a silent compromise on their workstation. As the team responsible for safeguarding the organization, you must work together to uncover the hidden foothold the attacker has established, trace their quiet expansion of control, and prevent your environment from becoming a target for further exploitation.
This environment is composed of critical infrastructure components typically found in a corporate network and together with your team, you will collaborate to:
  • Triage alerts
  • Investigate suspicious activity
  • Investigate forensic evidence
  • Identify the impact to your organisation
Screenshot 2026-01-23 at 8