Coming soon!
Microsoft CTF: Blind Spot
When 'Lumina AI,' a free unsanctioned browser assistant, spreads through Whirlwind Wealth's advisory team, a productivity shortcut evades DLP and escalates into regulated-data exposure with insider-trading and books-and-records risk. As cloud-discovery and endpoint signals flag anomalous use, the SOC pivots across MDCA, Purview, Defender XDR, Entra ID, and Sentinel to determine what left, through whom, and whether it was negligent or deliberate.
Blue
•10 teams
•6 hrs
•Intermediate
Scenario