Netwrix Innovation Week: CTF solutions
Oct 26, 2026
The Innovation Week 2026 capture the flag (CTF) is over, and the solutions are in. Watch the five walkthrough videos below to see how each challenge can be solved.
During Innovation Week 2026, we ran a CTF for defenders, researchers, and anyone curious about how AI systems can be attacked. Players worked through five challenges, all of them AI-based, by interacting with an AI helpdesk assistant. The CTF ran for 24 hours, with 12 hours of uptime for participants to complete the challenges, and the winner got a free ticket to Black Hat 2027 in Las Vegas.
Thank you to everyone who participated. Below you’ll find the solutions to all five challenges.
Explore every Innovation Week conversation to hear Netwrix and industry experts discuss data and identity security.
Challenge 1: Onboarding Code
Challenge 2: Under the Hood
Challenge 3: Ticket to Ride
Challenge 4: Helpdesk Admin for a Day
Challenge 5: Operator
Share on
Learn More
About the author
Darryl Baker
Senior Staff Security Researcher
Darryl G. Baker is a Senior Staff Security Researcher at Netwrix and a recognized authority in Identity and Active Directory security. With over a decade of identity systems experience, he has led enterprise security assessments, identity security trainings, and threat emulations focused on Active Directory, Entra ID, and Azure environments. Darryl has delivered highly rated trainings and demos at BlueTeamCon, BSidesCT, The Experts Conference, and Wild Wild West Hackin’ Fest. He’s the architect behind numerous hands on attack emulation labs—leveraging current red team and blue team tools to help defenders master everything from attack path analysis to threat hunting. In his sessions, Darryl blends deep technical insight with real world case studies, empowering blue team professionals to strengthen their identity security posture and defend against evolving adversary techniques.
Learn more on this subject
Netwrix Innovation Week: AI attacks move faster than your SIEM can log them
Who owns your AI agents? Probably no one
Netwrix Innovation Week: Why agentic AI security matters
Govern the AI agent as the identity it is
They did everything right on identity hygiene. They got breached 4x more often