Critical · active ransomware
Ransomware encrypting finance files on WS-FIN-07
EDR sees dcrypt.exe writing high-entropy files in the finance share and reaching for the file server.
Real tickets. Instant review.
Free — no credit card
1/5 · Alert: ransomware encrypting finance files
From alert to review in four steps.
Critical · active ransomware
EDR sees dcrypt.exe writing high-entropy files in the finance share and reaching for the file server.
Illustrative samples
A score and assessment the moment you submit.
Know where you stand and what's next.
A public link any employer can check.
Your progress in every skill.
Every specialty is free to start
Triage alerts, read logs, and decide when to escalate.
Assess findings, prioritize risks, and recommend fixes.
Review controls and risk from a business perspective.
Investigate permissions, configuration, and cloud logs.
Analyze network traffic and firewall rules.
Contain incidents, preserve evidence, and coordinate response.
(333 of 348 ratings)
I face these problems a lot in my work, and people have different views on the decision to make. This ticket helped me learn how to think through the right decision to protect the data.
The evidence was very clear.
As someone doing a ticket like this for the first time in my life, I thought your work was really great.
The answer feels like writing a report, and it feels realistic.
I face these problems a lot in my work, and people have different views on the decision to make. This ticket helped me learn how to think through the right decision to protect the data.
As someone doing a ticket like this for the first time in my life, I thought your work was really great.
The evidence was very clear.
The answer feels like writing a report, and it feels realistic.