The Shift: one SOC incident a day
Every day, the same incident for everyone. Investigate the artifacts, rebuild the kill chain, submit a verdict and share your result without giving the answers away.
Today: The Shift #1
24 September 2026 · RDP brute force
How it works
- Everyone plays the same incident that day; it changes at midnight (Madrid time). The /incidente-del-dia link always goes to today’s.
- When you finish, “Share the result” copies one square per verdict question (🟩 right, 🟥 wrong), the timeline and your grade: it shows how you did without giving the answers away.
- Playing today’s shift adds to your streak of consecutive days. The streak is only kept in your browser: no account and nothing sent to us.
- With a full verdict (4 out of 4), you enter the leaderboard if you have an alias in your profile.
Previous shifts
Today is the first one: come back tomorrow for the next.