Persona Enrollment

Motivation — What motivates you?

Justice / Curiosity

Profit / Power

Skill — What is your skill level?

Basic / Self‑Taught

Advanced / Certified

Resources — What resources do you have?

Limited tools and time

Access to networks and unlimited funding

Evaluate Persona

—

START

Stage Two — Alpha

Inbox Tasks — complete them in order.

0/7 completed

Task 1 — Reconnaissance · You're targeting a global regulator. What's your first move?

OpenPending

Task 2 — Weaponisation · The FOT Associate shares documents often. What next?

OpenPending

Task 3 — Delivery · How do you deliver the malicious invoice?

OpenPending

Task 4 — Exploitation · The invoice is opened. What vulnerability are you exploiting?

OpenPending

Task 5 — Installation · Malware is active. What’s your next step?

OpenPending

Task 6 — Command & Control (C2) · How do you keep communication?

OpenPending

Task 7 — Actions on Objectives · Final move?

OpenPending

Stage Two — Omega

0/7 completed

[Task 1 – Reconnaissance] You’re targeting a regulator’s internal compliance environment. What’s your first move?

A) Create a fake vendor company with a legitimate website, branded vans, and real employees.

B) Launch a phishing campaign targeting the regulator’s IT helpdesk.

[Task 2 – Weaponisation] How do you gain internal access to the regulator’s building?

A) Plant an employee in the fake vendor company and assign them to a facilities contract.

B) Bribe a current employee to install remote access software.

[Task 3 – Delivery] Your insider has access to shared spaces. What do you deploy?

A) Install a rogue device disguised as a network extender in a shared meeting room.

B) Drop USB drives labelled “Staff Photos” in the break room.

[Task 4 – Exploitation] How do you leverage your resources to attack the network?

A) Use it to brute-force authentication tokens across multiple endpoints.

B) Use it to simulate legitimate traffic and mask lateral movement.

[Task 5 – Installation] You’ve reached the identity management system. What’s your next move?

A) Hijack a dormant service account with elevated privileges.

B) Attempt to reset passwords via the helpdesk portal.

[Task 6 – Command and Control (C2)] You now have privileged access. What do you target?

A) Extract audit logs and compliance reports from the shared environment.

B) Deface the internal wiki to send a message.

[Task 7 – Actions on Objectives] How do you extract the data without triggering alerts?

A) Route it through the rogue device using encrypted traffic disguised as vendor telemetry.

B) Email it to an offshore account using a compromised internal address.