# Nation-State Attack Simulation (CTF challenge)

> A fictional nation-state actor breached CORP. Reconstruct all FIVE phases of the intrusion from the collected evidence — one token per phase, each hidden behind a different encoding: the malicious…

Canonical: https://codelivly.com/ctf/challenges/nation-state-simulation

| | |
|---|---|
| Category | Forensics & OSINT |
| Difficulty | Insane |
| Points | 10000 |
| Estimated time | 3 h |
| Type | Live instance |
| Solves | 28 |
| Author | Codelivly |

A fictional nation-state actor breached CORP. Reconstruct all FIVE phases of the intrusion from the collected evidence — one token per phase, each hidden behind a different encoding: the malicious macro (Initial Access), a Run-key (Persistence), a credential dump (Credential Access), a Windows 4624 event (Lateral / AD), and the exfil channel (Exfiltration). Your own isolated instance; tokens are unique to you. Submit each CLV{...}; capture all five to complete this capstone.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)