ZeroDay Labs, Cyber Range
Dashboard
Tracks
Admin
Edit lab
Editing phish-link-inspection
{ "slug": "phish-link-inspection", "tags": [ "phishing", "mvp", "guided-lab" ], "flags": [ { "key": "final", "value": "ZDL{phish-link-inspection}" } ], "hints": [ { "id": "hint-1", "content": "Start with the most obvious metadata field before diving deeper.", "penaltyPoints": 0 }, { "id": "hint-2", "content": "Correlate timestamps, source identifiers, and the user-facing lure.", "penaltyPoints": 5 } ], "title": "Link Inspection and Redirect Hunt", "runtime": { "mode": "artifacts_only", "cpuLimit": 1, "exposePorts": [], "templateKey": "phishing-artifact-lab", "memoryLimitMb": 512, "artifactsMountPath": "/lab/artifacts" }, "summary": "Review embedded links and identify the true destination and phishing indicators.", "artifacts": [ { "key": "primary", "path": "artifacts/phish-link-inspection.eml", "type": "eml", "label": "Primary Lab Artifact", "downloadable": true } ], "questions": [ { "key": "q1", "type": "short_text", "answer": "sample-indicator", "points": 10, "prompt": "What is the main indicator you identified first?", "caseSensitive": false }, { "key": "q2", "type": "short_text", "answer": "isolate and escalate", "points": 10, "prompt": "What action should the analyst take next?", "caseSensitive": false }, { "key": "flag-final", "type": "flag", "answer": "ZDL{phish-link-inspection}", "points": 20, "prompt": "Submit the final lab flag.", "caseSensitive": true } ], "trackSlug": "soc-analyst-phishing-email-investigation", "difficulty": "beginner", "trackTitle": "SOC Analyst – Phishing Email Investigation", "instructions": [ { "id": "step-1", "title": "Review the scenario", "content": "Read the scenario summary and note the primary investigation goal." }, { "id": "step-2", "title": "Inspect the provided artifact or environment", "content": "Use the artifact downloads or the live container session to gather evidence." }, { "id": "step-3", "title": "Answer the guided questions", "content": "Submit answers and the final flag before time expires." } ], "estimatedMinutes": 20, "timeLimitMinutes": 30, "dbLabId": "8c79a9a5-337f-426d-961a-a970337bc81f" }