Operation Southern Cross

Purple Team Incident Response CTF

Secure Corporate Financial Systems (SCFS) has detected irregular activity within the internal operations portal.

Your team has been granted analyst access to investigate the incident.


Exercise Overview

This challenge simulates a real-world incident investigation.

  • Investigate a SOC portal
  • Identify exposed operational records
  • Discover sensitive financial exports
  • Find evidence of persistence
  • Propose remediation steps

Begin by reading the Mission Briefing.