1Watch the recording.
Play it, pause it or step through it. Watch the files, the processor and the data routes.
Day 2 · What malware does once it's in
Sandbox Lab
What is this program really doing?
Five made-up devices sit in a sealed test chamber. Watch a recording of each one, pin the moments that show what's going on, name what the program wants and test a response.
Day 2 · The lesson and this game
Watch what it does, then decide what it wants.
In the lesson, you learned that malware can go after money, information or a device's power, and that one sign alone is a clue, not proof.
Here, watch what a program does, decide what the evidence shows and test a response to see what harm remains.
How to play
2Pin the evidence.
Pin the notes that show what's really going on. Then name what the program wants, or choose Not enough evidence yet.
3Test a response.
Pick a response and predict what happens. Each test starts at a set moment, and you can switch between the recording and the result.
Every device, program and case here is made up. The chamber is a model for learning. Never run a program you don't trust, and tell a trusted adult or the tech office if a device acts strange.