Intrusion detected on the pathology network. Find it before it spreads.
LIVE00:00
Spread
Exfil
Incident Response · you have the board
Something is loose in the network.
04:20. A regional hospital's pathology systems. One workstation is already compromised — and every few seconds, the intruder tries to jump to the next machine. Left alone, it reaches the file server, steals the credentials, and owns the domain controller. Your job is to stop it before it gets there — without taking down the systems that keep patients alive.
Investigate a host to confirm whether it's actually compromised. Not every alert is real.
Isolate a host to sever its links and stop the spread through it — your firebreak.
Preserve a host to image the evidence before it's lost. Investigators will need it.
Escalate unlocks the moment you learn what they're really after. It rotates the stolen credentials.