Watson vanishes. Holmes returns. Mycroft opens DIOGENES.
17-21 September 2026 · Defensive CTF · Event page
| # | Sherlock | Category | Difficulty | Author | Description |
|---|---|---|---|---|---|
| 01 | Silent Dividend | Blockchain | Medium ⭐⭐⭐ | iamroot | Electron smart-contract drainer analysis |
| 02 | Bottle Out | SOC | Easy ⭐⭐ | achille | Windows disk and browser forensics |
| 03 | Whisper Chain | Threat Intelligence | Medium ⭐⭐⭐ | achille | XMPP threat intelligence and operator profiling |
| 04 | Paper Ghost | DFIR | Easy ⭐⭐ | CyberJunkie | USB-delivered surveillance attack reconstruction |
| 05 | Poisoned Branch | DFIR | Medium ⭐⭐⭐ | VivisGhost | Backdoored Git repository and Linux compromise |
| 06 | Silent Passenger | Malware Analysis | Hard ⭐⭐⭐⭐ | Galvatronus | Android head-unit malware analysis |
| 07 | Iron Feather | DFIR | Hard ⭐⭐⭐⭐ | felamos | Encrypted drone mission and flight reconstruction |
| 08 | Borrowed Name | DFIR | Insane ⭐⭐⭐⭐⭐ | canopus | USB intrusion and Active Directory forest compromise |
| 09 | Last Light | DFIR | Insane ⭐⭐⭐⭐⭐ | canopus | Kerberos and domain controller compromise analysis |
Previous edition: Holmes 2025