All Campaigns
blue teamIncident Responder

🔒 Friday Afternoon Encryption

Ransomware is encrypting a file share in real time. Contain the spread, preserve the evidence, and protect your path to recovery — without making it worse.

Whose job is this?

This incident lands on these classes' desks. Their guides carry the certifications, tools and labs that make the calls you just made feel routine.

Not sure which one is you? Roll a character.