
// Situation report
Case: unknown actor with internal access
At 08:47 monitoring flagged unusual activity. Someone with valid credentials has copied data, locked systems and left traces behind, both on the network and in your own building.
Security firm Nord CyberSec has connected your teams to its command centre. That is where the tools are. The evidence is all around you.
- Suspect:
- Motive:
- Next target:

