Cyber Kill Chain: Reconnaissance

Hey mathias​, I've just checked who's completed it and found these people:

N8mann​, CyberAAA​, Mango​ and Zexceed​.  I wonder if they can quickly give you a tip?

Hi mathias​ Just looking at your SPL, I believe the sort command defaults to descending (newest first). You're trying to find the first event that matches so require the oldest.

Try changing to "| sort +_time" instead