In the wake of the infamous SolarWinds attack, APT29 has launched a sophisticated campaign targeting Mimecast to exploit trust in the supply chain. Tasked with investigating the breach, analysts must uncover how stolen certificates facilitated unauthorized access to Microsoft 365 environments, threatening critical infrastructure and government entities.