IT-Master — Windows Incident Response Simulator

🛡️ IT-Master 🔬 Incident Response Simulator SAFE

Phase 1/4 0 pts 🔍 0 evidence Shop

1 Detection

2 Investigation

3 Containment

4 Root Cause

📋 Current Objective

PHASE 1: DETECTION

Loading...

Answer

Feedback

Investigate the system. Run commands in the terminal.

🔍 Evidence Collected (0)

No evidence yet. Run commands to investigate.

🚨 Alert Timeline

03:15 AM — SIEM alert: Suspicious outbound to 185.x.x.x:4444

03:12 AM — AV disabled on WS-PC247

03:00 AM — Failed RDP brute force from external IP

CompTIA CySA+ → · EC-Council CHFI →

C:\Windows\System32\cmd.exe — Incident Response IR-LAB

C:\IR-LAB>

🛡️ IT-Master · Home · Shop · Copyright © 2026 栄 NTT. All rights reserved.