Coming soon!

Microsoft CTF: Blind Spot

When 'Lumina AI,' a free unsanctioned browser assistant, spreads through Whirlwind Wealth's advisory team, a productivity shortcut evades DLP and escalates into regulated-data exposure with insider-trading and books-and-records risk. As cloud-discovery and endpoint signals flag anomalous use, the SOC pivots across MDCA, Purview, Defender XDR, Entra ID, and Sentinel to determine what left, through whom, and whether it was negligent or deliberate.

Blue
10 teams
6 hrs
Intermediate