Verified credential
PHANTOM - Case File 1
Awarded to Ayinde Perouza on September 14, 2026
PHANTOM is awarded for completing Case File 1 on Guardian Foundry, a hands-on incident response scenario built around a current real-world supply chain compromise pattern. Earners triage a simulated CI/CD pipeline incident from raw artifacts, identify indicators of compromise, build detection rules across host and network telemetry, execute an enterprise-scale threat hunt, and produce a complete incident response report.
Criteria
To earn PHANTOM, learners complete Case File 1 on Guardian Foundry and submit passing work across all required deliverables:
- Extract and answer 10 indicator-of-compromise questions from a multi-artifact incident package
- Complete 2 write-ups covering threat actor attribution and operational impact
- Author 3 detection rules: YARA (malicious payload), Snort (exfiltration traffic), and Sigma (build-time process telemetry)
- Build an enterprise threat hunt query in either KQL or PowerShell
- Produce a complete incident report including IOC entries table, executive summary, technical analysis mapped to MITRE ATT&CK, and remediation steps
Every report is reviewed 1 on 1 by an instructor before the badge is awarded.