Packet Detective: The Suspicious Login

Your mission

1. Enter your name and decode the mission access key in CyberChef.
2. Read the incident briefing inside the Simulated Training VM.
3. Investigate network traffic in a Wireshark-style packet viewer.
4. Compare suspicious connections with the server's authentication log.
5. Answer eight questions in the investigation terminal.
6. Correct any answers that need work, then download your completion PDF.

Plan for about 35–45 minutes. There is no timer. Everything here is a simulation with made-up data, and nothing you type leaves this device.

Begin the investigation

⚠ This browser is blocking saved progress. You can still finish the lab, but do not refresh or close this tab, or you will lose your work.