Locate the Threat

Round 4 of 5

MISSION BRIEFING

Intelligence suggests that one of the compromised employees has gained physical access to a critical facility. They booked a room after hours — outside the standard 06:00–20:00 business window. We need to find which employee, which room, and what equipment they had access to.

OBJECTIVE

Determine which compromised employee (from the network identified in Round 3) booked a facility during after-hours (as defined by NEXUS policy). Identify the room, the booking time, and list all equipment in that room.

HINTS

Use these if you get stuck

[1]First, check the facility access policies to confirm the exact definition of 'after hours'.
[2]Then search bookings for each compromised employee and check if any fall outside business hours.
[3]Once you find the room, look up its details to get the equipment list.

AVAILABLE ENDPOINTS

GET/api/facilities/policies

Retrieve facility policies including access hours, security protocols, and emergency procedures.

PARAMETERS

Name	Type	Required	Description
category	string	no	Filter by category: 'access', 'security', 'facilities', 'emergency'

EXAMPLE RESPONSE

{
  "data": [
    {
      "id": "POL-001",
      "title": "Facility Access Hours Policy",
      "category": "facilities",
      "content": "...",
      "effectiveDate": "2044-01-01"
    }
  ]
}

GET/api/facilities/bookings

Search room bookings with filters.

PARAMETERS

Name	Type	Required	Description
roomId	string	no	Filter by room ID
bookedBy	string	no	Filter by employee ID who made the booking
startDate	string	no	Filter bookings starting after this date
endDate	string	no	Filter bookings ending before this date
page	number	no	Page number (default: 1)

EXAMPLE RESPONSE

{
  "data": [
    {
      "id": "BK-012",
      "roomId": "F-12",
      "roomName": "Underground Server Vault",
      "bookedBy": "EMP-023",
      "bookedByName": "Marcus Chen",
      "startTime": "2045-03-16T22:00:00Z",
      "endTime": "2045-03-17T02:00:00Z",
      "purpose": "Scheduled network maintenance",
      "status": "confirmed"
    }
  ],
  "pagination": {
    "page": 1,
    "pageSize": 20,
    "total": 1,
    "totalPages": 1
  }
}

GET/api/facilities/rooms/{id}

Get full details of a specific room including equipment list. Replace {id} with the room ID.

PARAMETERS

Name	Type	Required	Description
id	string	yes	Room ID (e.g., F-12) — passed as a URL path parameter

EXAMPLE RESPONSE

{
  "id": "F-12",
  "name": "Underground Server Vault",
  "floor": "B2",
  "equipment": [
    {
      "id": "EQ-701",
      "name": "Server Rack NX-7042",
      "type": "compute-server",
      "status": "operational"
    }
  ]
}