3-turn starter plan
- Turn 1: Investigate alerts and isolate compromised hosts.
- Turn 2: Block suspicious outbound traffic and continue scans.
- Turn 3: Restore encrypted systems after containment is stable.
New player? Choose Start + Tutorial for guided first moves.
💡 Teams with the same Exercise ID appear together on the leaderboard and in the Facilitator panel.