Measured 19 September 2026 · Public derivative · Historical training evidence, not approved threat intelligence.
Ten additional cases: reports and evidence
This index covers only the ten additional captures. Full reports combine native evidence, comparison notes, and passive enrichment. Native PDFs are draft exports, not the complete analyst dossier or approved intelligence.
Read the article · All screenshots · Measured totals
Publisher sources
Publisher PCAPs and answer archives are not redistributed here. Their pages supply source material and applicable access instructions. The December SANS answer diary presented an anti-bot challenge during article link verification.
| Case | Exercise | Answer source |
|---|---|---|
| 2021-09-10 | AngryPoutine | Publisher answers |
| 2021-10-22 | October ISC Forensic Contest | Publisher answers |
| 2021-12-08 | December ISC Forensic Contest | Publisher answers |
| 2022-01-07 | Spoonwatch | Publisher answers |
| 2022-02-23 | Sunnystation | Publisher answers |
| 2022-03-21 | Burnincandle | Publisher answers |
| 2024-07-30 | You dirty rat! | Publisher answers |
| 2024-08-15 | WarmCookie | Publisher answers |
| 2024-09-04 | Big Fish in a Little Pond | Publisher answers |
| 2024-11-26 | Nemotodes | Publisher answers |