CYBERESCUDO / IDENTITY INVESTIGATION

An alert never tells
the whole story.

Investigate a Microsoft 365 identity. Connect the evidence, challenge your hypothesis and explain what you would do next.

Temporary work on this page: reloading or changing language clears it. Download the report to keep it. Do not include real information in your notes.

01 Open the investigation

Sources, availability and limits of this case

02 Read the evidence

Open records and note their IDs. Timing alone does not establish causality.

03 Justify the decision

Choose only claims you can support. Cite the specific records behind them; selecting everything is not enough.

Claims and citations

Proposed next steps

Up to 2,000 characters. Included in the report; the lab does not evaluate the meaning of your text.

04 Challenge your reasoning

Choose your decisions for an evidence-based review.

Educational guidance for this dataset, without an official score. It does not certify that an account is safe or compromised, or replace a real investigation.