COMING SOONBeginner
Open SMB Share: Unauthorized Data Access
A finance file share on an internal Windows server was misconfigured to allow all domain users read access. A workstation account with no finance role connected over SMB and bulk-read payroll records, M&A strategy documents, and board materials. Reconstruct the session from Windows Security audit events and internal firewall logs.
25m
6 tasks
25 points
FreeLaunches in 5 days
Sep 29, 2026
Create your free accountTuesday, September 29, 2026 at 9:00 AM
Be ready the moment it drops, free.
Training Tools
SIEMFirewall
What you'll investigate
6 objectives unlock when this operation goes live.
1Locate the share connection
2Identify the accessing account
3Trace the workstation source
4Count the sensitive files accessed
5Identify the misconfigured permission
6Map the collection technique
Be first when it launches
Create your free account now. The moment this operation goes live on Sep 29, 2026, you can jump straight in — and you'll have the rest of the catalog to train on meanwhile.
Get Started Free