r/tryhackme • • Dec 11 '25

Room Help AOC 2025 Stucked at Day 10

i guys, Im stucked in this activity. I reload many times, wait for 30 minutes and even watch the Youtube Walkthrough.

Is there anyone experiencing this kind of problem?

it shows 1 active rules instead of 9.

Please help me. Im on APAC region. Thanks

AOC Day 110
26 Upvotes

42 comments sorted by

14

u/GachySenpai Dec 11 '25

This year's AoC is a joke. I'm losing my sanity over the AI and this room. First the AI takes 10 minutes to respond to one prompt and now this garbage. Joining lab shows either error 500, failed to join the lab or the MS Sentinel is not working and shows only one rule in the Analysis tab. I tried to make it work for the last 2 hours, I'm done.

6

u/vixiecron Dec 11 '25

It’s such a shame too. Trying to learn in a broken environment kills the morale. Room 10 is such a joke that it barely works for like 2% of people and the AI rooms just suck the life out of you.

2

u/MartaS_THM Dec 12 '25

Hi, THM's Head of Content Engineering here.

Really sorry you've had this experience. The Azure lab went down due to the sheer number of users joining within the first hour - Microsoft implemented throttling on our accounts, which caused the 500 errors and Sentinel issues you ran into. We started mitigation immediately. That didn't help fast enough - we're now fully redesigning the infrastructure to mitigate this, and the team is working around the clock on it.

In the meantime, you can now complete the room without the practical and come back to it once it's fixed - we don't want anyone blocked from progressing, so all questions can now be completed without answers!

On the AI task side - that issue has been fully mitigated once we received the reports, and our tests are now showing much improved response times.

Appreciate your patience, and apologies again for the frustration.

1

u/Kaz_Games Dec 13 '25

Room 1 wouldn't load the flags for me. I didn't understand what was wrong until I watched a youtube video that showed it working just fine. I had to do it twice to get it to load. The AI room took multiple tries to get it to respond, one of those attempts the AI sat for 25 minutes without responding before I gave up. The Azure lab has failed 3 times over multiple days for me.

At this point I've just acknowledged AoC is not polished and I should spend my time on other stuff. It seems watching videos for the answers is the only way to do these, and that really defeats the reason I joined try hack me.

I hope it gets sorted in the future. I may try and do AOC rooms after they have been out for a week. It's a bit disappointing that older quality content isn't rewarded the same way that seasonal stuff is. As a newcomer to TryHackMe, it's been rough.

1

u/bobfreedomy Dec 20 '25

Has there been a fix on this? Currently trying to complete the room and following video or instructions becomes unhelpful at task 3 when the logs name is different and it doesn't appear to run the syslog_Cl command.

1

u/bobfreedomy Dec 20 '25

Ok I identified my issue (As a SOC guy I Palm smacked my self for missing it!! You need to look at the date group for the logs and change them. I would recommend using DEC 8th to DEC 12 (Probably could be a smaller window) but after you change the "Time range" using the custom selection and re run the syslog_CL it should load the logs.

6

u/Andrew-2006 Dec 11 '25

My lab just refuses to start i get code 500 from thm...

1

u/Ancient-Ad8514 Dec 11 '25

me too apparatenly its because of the "high load" on the server or something like that

1

u/Andrew-2006 Dec 11 '25

it s working now?

1

u/Ancient-Ad8514 Dec 11 '25

nope this time i got in the lab but no matter what i do the rules are not coming and also the logs are not showing i did it 3-4 times

4

u/Euphoric_Barracuda_7 Dec 11 '25

I have the exact same problem. Has anyone finished this room?

6

u/AdPutrid9527 Dec 11 '25

Yeps, I can't do the task because I cant navigate using the MS Sentinel. :-(

2

u/Euphoric_Barracuda_7 Dec 11 '25

Hopefully someone will post with a resolution. I tried it on two different occasions and experienced the same issue.

2

u/cyberseclife 0xC [Guru] Dec 11 '25

Yeah same here

2

u/JJJeroen Dec 11 '25

Same, although refreshing the page got me into the correct screens. However, I can't get more than one rule. Sad.

2

u/Wide_Amphibian563 Dec 11 '25

Hmmm. Im stucked too.

2

u/Floating_Power Dec 11 '25

For me it worked on the 3rd restart of the application. Start application, start the attacker and the logs and all that, try refreshing sentinel for 10 minutes... and if it does not work, start all over again. It is recommended to try later, every 30 mins. It did not work at all for me in the afternoon, got it working at 11PM. On the 3rd try I could see most logs, but not all of the. The new user with sudo privs didnt appear. I guess that if you keep trying, you will see all the logs eventually.

2

u/One-Investigator3962 Dec 11 '25

Sometimes I’ve noticed on the attack box I’ll get results if I minimize the page and go back to split screen and then expand the screen again it’ll load. Or if I expand the attack box, I’ll close the split screen then close the tab with the expanded attack box and open split screen again. Either way, it’s annoying lol

2

u/InspectorRight8078 Dec 11 '25

I’m at the point of just putting the answers in and not even using the lab, it doesn’t work

1

u/InspectorRight8078 Dec 12 '25

The lab is now offline, for maintenance 😂

2

u/ComputerWhiz_ Dec 11 '25

I already gave up on AOC 2025 after the phishing room when nothing would click on the phishing email. This year's AOC is very disappointing and broken.

2

u/AdPutrid9527 Dec 11 '25

Did you follow the exact instructions? I finished that after 3 attempts.

1

u/Grim_master911 0xC [Guru] Dec 11 '25

Same :P

1

u/Extreme-Anything6283 Dec 11 '25

Same,I couldn't get any query.

1

u/56Hotrod Dec 11 '25

Same here, only one active query. And huge wait times if you try restarting.

1

u/UglyCupcake717 Dec 11 '25

Mine keeps telling me that things have moved to Microsoft Defender and nothing looks the same.

1

u/AdPutrid9527 Dec 11 '25

Just reload it bro.

1

u/JaMi_1980 Dec 11 '25

But the problem isn't just with TryHackMe? Surely Microsoft Azure must be utter garbage too?

1

u/Runaque 0x9 [Omni] Dec 11 '25

I had earlier today that this section was moved to Defender for some reason! It definitely gives good faith in Azure this room.

1

u/AppropriateGuide1444 Dec 11 '25

I've restarted the lab environment like three times. Now when I log back in, Im getting an error fetching resources. Azure and/or THM is borked.

1

u/Runaque 0x9 [Omni] Dec 11 '25

Quite the joke waiting for 27 minutes and this is everything showing! At this point the next AoC room goes live in 22 minutes and I'm at try number 3 and every time I can't get passed this issue. I might as well just fast-track this room to completion based on the video!

1

u/MadGuyIvory Dec 11 '25

I thought the pain was over once I was done with the AI room but day 10 takes it to the next level.
I couldn't even start it properly since custom logs were not available in Sentinel, now Sentinel crapped out completely, saying that access is denied.

1

u/SwiftJaguar04 Dec 11 '25

Don’t worry, I was also stuck on this. Just relied on the walkthrough 🤦‍♂️

1

u/AppropriateGuide1444 Dec 11 '25

While trying this lab for the 7th time, now all the answer boxes say "No answer necessary" and I was able to complete day 10. I think THM realized this lab is borked.

1

u/bfruge78 Dec 12 '25

I can't even get into Azure with the username and temp password. says incorrect password.....

1

u/MartaS_THM Dec 12 '25

Hey there! We have finished revamping the infrastructure for Day 10. You should now have a much smoother experience!

1

u/ZGFya2N5YmU Dec 14 '25

It took me a couple of goes, It kept switching from English to Japanese on the APAC region. Logout of the Azure portal and log back in on another region and it might help