It's a challenge. Visit the website, count to 15 seconds, and mimic a real incident ... *CLOSE THE WEBSITE*.

Using your existing security tools try and find everything that happened.

Compare this to what you can find with Symantec's Security Analytics (pviosuly BlueCoat, pviosuly Solera)

So here is the challenge. Can you work backwords and find...

Zombie Botnet Beacoming

The leakage of your machines IP address to the attacker?

Internal lateral scans?

...And proof of this info being exfiltrated? (I did say read the warning!)

Leakage of whether your logged into Google, Google Plus, Facebook?

The file that was pushed to your desktop? How did it get there?

The exe hiding as a JPG?

Malware Passwords on the wire?

And the easy things... DLP violation, SQLi, Proxy bypass, bad URLs... etc etc.

Download this file on the target computer and investigate in the security tools.

* Test if your security tools are configured to look in side ZIP

* Test if your security tools are able to look inside ZIP

* Test how your security tools handle password protected ZIP files

Choose a file and upload.

???

Load this page, and read this section.

To validate what headers are added by your upstream Proxy (which you normally wouldn't see)