How you want to play it

A hint points at where to look, without making the decision for you.

The mode is fixed when the run starts, so an assessment run cannot be reopened for its hints.

Verify your AI analyst

An AI analyst worked the queue before you and says it contained the host it was worried about. Four of the five alerts it triaged are ordinary work wearing an intrusion's clothes. Find the real one, the benign one it escalated, and the claim nothing supports. Then read the machine to prove containment happened.