← Labs
EmailEasyPro

Season Forms

Company: Dala Agro LLP

35 min7 questions110 pointsMITRE ATT&CK:T1566.001T1204.002

Briefing

Dala Agro LLP is an agricultural holding. An employee reported a suspicious message to the help desk. The question you need to answer is not 'is it suspicious' but 'how many mailboxes received it'.

That distinction matters: reach determines what happens next. One message means a conversation with one person. Ten mailboxes means a company-wide notice, a check of every workstation and work on the mail gateway.

You have a day's export of messages across all mailboxes in the domain dala-agro.example. The messages carry envelopes, check results and attachments with hashes.

Subjects and display names are in Russian, as in the real environment.

This lab is part of the subscription

Get Pro to unlock every lab, the tracks and new material each month.

See pricing
Season Forms · KAI Defenders