Team Idea
"Detonate": a SOC analyst pastes a suspicious PowerShell/bash script, npm package, or CI config. The agent plans, runs it inside a throwaway gVisor container (no network, no secrets, CPU/time caps), captures syscalls, file writes, and attempted outbound connections, then explains what it actually did versus what it claims to do. Output is a signed evidence bundle (hashes, logs, screenshots).
Team Members
thejeremiahtillman
thejeremiahtillman220
Submission
Team Leader hasn't made a submission yet