Use the password you found in the Notes app on Alex's phone
(Exercise 01) to log into their computer and view the sealed case file. The
Notes app didn't give you a username — but at SCCDU, most staff logins are
simply their employee ID number. If you didn't note it down, it's worth
going back to check what else was on Alex's desk.
New to this? Here's exactly how to approach it: this login box needs two
separate pieces of information, a username and a password, and you already
have both — they're just in two different places. The password is the one
written directly in the phone's Notes app from Exercise 01 — type it in
exactly as shown, including capital letters and the # symbol, since
passwords are case-sensitive. The username isn't given directly anywhere;
instead, this page tells you that staff usernames are their employee ID
number. If you don't remember that number, go back to Exercise 01 (it's
still open in its own tab) and look again at the access card that was in
the desk drawer — the number is printed quietly in the bottom corner, not
somewhere obvious.
🔒
SCCDU-WKSTN-04 · locked
// CASE FILE 4471 — DECRYPTED
Login successful. Alex's last note confirms the network intrusion was
traced back to a phishing email that harvested a reused password. The
account has since been secured with a longer, unique passphrase.
Lesson for the file: short passwords and reused passwords are two of
the easiest ways attackers get in. Long, unique passphrases (like
Bellingen#94 instead of something simple like
password1) are far harder to guess or crack.