A busy computer. A few convincing impostors.
Follow the evidence and decide what gets to stay.
Three sample processes. Nothing saved. Log in to compete.
Select Inspect to read the first process.
Correct decision: +100. Terminating a legitimate app: −150 points and −25 stability. Missing a threat: −10 stability. A flawless wave: +100, plus up to 30 speed points. Unclassified legitimate apps cost no stability. Stability at zero ends the run. A restarted process never scores twice.
Ranked: three 60-second waves, three runs in any 24 hours. The clock continues when you leave. Separate points; no shared XP or mission progress.
Keyboard: in the inspector, K keeps the process running and T terminates it.
This is a simulation with fictional incident evidence. Names, CPU usage and signatures alone do not prove safety. Terminating a real process is not the same as removing an infection.