CyberMinds Task Knowledge: #107 CTF-03 Failed Auth Spike

Issue: https://github.com/Cyber-Minds/CyberMinds/issues/107 Owner: @entyX Due: 2026-04-24

Objective

Deliver intermediate log-analysis challenge for failed-auth anomaly detection.

Recommended Build Plan

1. Add synthetic sample.log with realistic burst patterns.
2. Require top offending IP extraction and short incident summary.
3. Add checker that validates both ranked outputs and summary quality signal.

Security And Safety

• Logs must be synthetic and contain no PII.
• Block dangerous shell expansion patterns in checker invocations.
• Keep parse operations bounded for stability.

Quality Checks

• Include a reference expected result for regression testing.
• Validate tie-break handling for repeated counts.