Video: Roll Back to the Future: Guided Workshop + Trivia Experience | Duration: 2980s | Summary: Roll Back to the Future: Guided Workshop + Trivia Experience | Chapters: Welcome and Introduction (19.325s), Audience Poll Launch (131.865s), Identity-Based Attacks (214.735s), Recovery Dilemmas (363.055s), Roll Forward Process (463.545s), Change Classification (610.915s), Clean Recovery Process (757.195s), Backup Best Practices (910.8s), Testing and Drills (1037.725s), Upcoming Events & Offers (1194.13s), Trivia Game Session (1309.515s), Trivia Quiz Questions (1606.21s), Trivia Mid-Game (1906.75s), Leaderboard Check (2326.405s), Trivia Questions Continue (2439.165s), Wild Gunman Question (2553.575s), Trivia Quiz Questions (2597.18s), Penultimate Question (2676.4s), Final Trivia Question (2721.405s), Winner Announcement (2774.195s), Closing Remarks (2913.095s)
Transcript for "Roll Back to the Future: Guided Workshop + Trivia Experience": Good morning. Good afternoon. Good evening, everyone. Welcome to this, this webinar. We're doing things a little bit differently to how we normally do these rubric workshops. I'm gonna still talk at you for a little bit. I'm gonna keep it nice and short. Really, really just wanna kinda make sure you understand what Rubik identity roll forward is all about. And then I'm gonna hand across, to our esteemed host who's gonna take you through, some kind of crazy trivia stuff, after which there will be prizes. We'll get all of that done in under an hour. So just very briefly before I get cracking on the on the slides, my name is Kev Johnson. I run technical marketing for our identity business unit here at Rubrik. I've been at Rubik now five and a half ish years. I've covered all kinds of stuff in my time. But it's... It feels really good to, to kind of come back to identity. It's something that's been really important to me all the way through my career. So let's get moving. I've got about twenty minutes of slides. I'm gonna try not to, hold you any longer than that. Once we get to the end of the slides, there's a couple of QR codes I'm gonna flash up. We'll also drop the links into the chat so we... You've you've got access to these things. One of them will be a self guided lab, so you can basically go through the thing that I've been talking to you about. The other one is a a code so that you can basically join some... Something that we call full access. Now full access is, it's a tabletop exercise, essentially. It takes you through, the worst day in, in a fictional company's history. There's there's a crazy cat lady. There's all kinds of crazy... It's it's it's a lot of fun, but it's a great way to kind of just figure out where the gaps might be in your identity resilience part, you know, your identity resilience strategy and what you might wanna do about that. Okay. So, yeah, there's the agenda. Let's crack up. So, what I really wanted to ask is... And, hopefully, we we have a... There we go. We've got a poll, tab up now. I'd just like you to answer honestly. If your directory... In this case, I'm talking about active directory, but it could equally be on for ID. It could be Okta. It kind of doesn't matter. Whatever you're using as a as a directory source. If it was compromised tomorrow, how long would it be until you trusted that you'd got rid of the attacker and they didn't have any way back in? So we've got a few different options in here. I'm just gonna give it a little moment to see, see what the what the outcome of that is. Maybe I don't get to see that. Let's see. Yeah. So we got... You've... What what else? Someone's someone's feeling super confident. I'm just gonna leave that a a moment longer. I suspect I can't see it because it's it's expecting me to to fill this one in. But, yeah. Cool. That... I mean, three days is three days is still pretty good. Three days is still pretty good. So, yeah, we've, we've got some got some got some interesting... Some pretty confident people, on the call today. So that's amazing. But let's take a look at the kind of problems that were, you know, that typically cause this to be, challenging. As long as it takes a recertify, that's an interesting, interesting point there, Walter. So, I'm kind of getting a little bit tired of, you know, of saying this. The attackers don't break in their login, but the unfortunate thing thing is it's true. So if we take a look at CrowdStrike's, 2026, threat threat report... Global threat report, we can see that in 2024, 79% of attacks were malware free. They were identity based. They didn't use they didn't use malware or software vulnerabilities necessarily to get in. This year, it's 82%. Who knows? Next year, maybe it'll get up to the magical 88 miles an hour that's... That that was needed for the DeLorean. I'm not I'm not dropping any hints there, but, you know, maybe that'll come up in the question a little bit later today. But, you know, those numbers are terrifying. You know, if I think from the perspective of, most security teams, you know, they they they spend a lot of their time on the concept that you can you can prevent a thing from happening. And, unfortunately, honestly, that that that that has failed. You still need to do everything that you can to make it as difficult as possible for a threat actor to gain access to your systems, but you also need to plan for what happens when all of your defenses fail. So if we think about, why things are really difficult from an identity perspective, and this is this is really different from when... If we think about how you recover a file server, a virtual machine, a database, If you've if you've if you've had ransomware, first of all, you've got a really good signal that you've been breached at that point. So ransomware tends to be... You know, it's it's it's super annoying when it happens, but at least you know it's happened. When you have an identity based breach, often, you've got no indication that it's actually happened at all. So Threat actor gets in, you know, they... You continue making all of your changes within within your directory. We we had a meeting with, with a customer recently, and we asked them, you know, how many how many changes are happening in active directory in an average month. And I was expecting them, you know, to say maybe maybe three, 4,000 changes, something like that. And this specific customer, and I, unfortunately, cannot name them, but this specific customer was running through around about two and a half million changes in active directory every day. So if we think about everything that we... You know, all of those changes, you would hope that they're all legitimate changes. But when you get popped, unfortunately, threat actors make changes too. So they might leave backdoor accounts, might make changes to group memberships, add a federation trust for your cloud SSL provider, things like that. The problem here is that they're all kind of baked in with all of the... Those legit changes. So most of those changes are gonna be people joining the company, people leaving the company, people moving around within the company, joiners, movers, leavers, like JML, we we we tend to call them. But there's also other things that could have happened. So when it comes to recovering from that kind of situation, you've kind of got two horrible choices. One is you restore from an old backup. So you get rid of all of the stuff that the threat act has done. That takes you back. You you know, you're you're in a you're in a clean, safe position. You've also just lost all of the changes that happened over that period of time. Now in this case, the slide here, 3403. That's an entirely plucked from there. I'm I'm gonna I'm gonna be honest with you there. There's... I I don't have a specific example customer I can point you out for that, but it's gonna be different for every organization. The other option that you have is that you basically stay where you are and you try to remove the changes that the threat actor made. And realistically, what happens there is threat actor still likely has some kind of foothold in there. So you you could well find yourself in a position that you think you've got rid of them, but they're still there. And now they know more about your MO. They know more about how you go about doing your business. So a week of change, we've got the attacker included. What we're gonna do... This is this is basically what roll forward is in in one slide. So first of all, we roll back to a clean baseline. Now that clean baseline could be could be two weeks ago, could be six months ago. We we we don't really know. We need we need to have some kind of indication as to, you know, when when did the threat actor get in so we can go back to a clean point in time. And this is one of the other really important things about roll forward. You have to have that clean point in time to be able to to restore back to. Now when we speak to a lot of security people, they don't really think about backup as being a security tool, but availability and the ability to restore your business is super, super important. Sorry. I've I've just realized there was one one question around that 82% using valid credentials. 82% identity based attacks. So that could... Those credentials could have come from phishing. They could have come from, you know, they could be session tokens being stolen. There's any number of ways that they could go about. But, yeah, that statistic, CrowdStrike put out these reports every year. 82%, it was, for 2025 in the report they put out this year. So, So, yeah, we roll back, and then we recover only the good stuff. Now I'm gonna run through this a couple more times just to kind of make sure that the point the point is kind of picked up here. So we're gonna restore. So we pick a clean point in time. We restore to that. We capture every change made. Now what I mean by that is we take a snapshot of the state of the environment, a kind of post compromised state of the environment, what it's like right now. We have a snapshot that we've... We that we have... That we used to recover. We we then diff those two points in time. What we can do then is we can go, hey. Now we know how the identity services have changed between point a and point b. The next thing we need to do is we need to classify those changes. So if you've got three and a half thousand changes that you need to classify, then, you know, potentially just being able to do that diff, it's helpful because you know what's changed. But you still kinda need to go, well, how do I know what's good, what's bad, and what I need... What needs further investigation? I'll come on to that in the next slide. So once we've done the classification and we've said, these are good, these are bad, and we've decided for the ones that aren't classified whether they are good or whether they are bad, we then roll them forward. So think of this like a think of this like a like a database transaction log restore. So you restore to a full backup, and then you replay the transaction logs. But because what what we have here is we still have a threat actor potentially in those transaction logs, we have to selectively remove those specific transactions. And that's the magic of roll forward. So there we go. Restore to its trusted baseline. I've kind of covered all of this now. Classify every change. So this is this is where the magic happens. So we ingest signals, as you... As some of you may know from, the likes of CrowdStrike. So they're next gen identity security product, Microsoft Defender for identity, and, also, you know, you can provide your own IOC. So if you have threat intelligence, that, you know, maybe maybe you know that one specific identity was compromised and you wanna track every change that that identity made, or maybe you know you know that the, you know, the IP address that the threat actor compromised, the the the endpoint, for example. Feed all of that into the classification engine. We'll mark all of those transactions as suspicious. Now just because something is suspicious doesn't necessarily mean that it's it's bad. But what we're gonna do is we'll put it in a bucket there for you. You can then go in if you believe that some of those are actually legitimate transactions. You can say, actually, yeah, I do wanna roll that one forward. Rubrik doesn't make this decision for you. On the legitimate side of things, we ingest signals from the likes of HRIS tools, like, like Workday, for example. So if you have your join us, movers, leavers process managed by something like Workday, we can ingest that information and say, okay. Well, if it's come from Workday, it's probably legitimate. We also work with IGA tools, so things like SailPoint, where you might have, might have other changes, group membership changes, for example. Again, if something has come through and it's been approved through SailPoint, it's probably a legitimate change. So we put that in the legit bucket. Again, you can go in before you do the roll forward process and say, actually, we don't want to replay that that specific transaction. That's fine. Again, Rubrik isn't making the decision for you. We're just helping you sort them into the buckets. And then candidly, we have the unclassified. So this is the stuff that doesn't meet a known good or a known bad. Hopefully, this is a much smaller subset. So I I did some stuff with, in in in our labs, and I had, like, I think, like, sort of three and a half thousand changes. Once I'd automated the the the classification, we we ended up with about 30 changes. And I could go through those and very clearly, like, look at exactly what changed, where that had come from, what the what the implications were of those changes, make a decision to take some with me, and leave some behind. So we need to have a human to to do that review there. But if you can if you can only have to sort through 30 changes rather than three, three and a half thousand changes, that's a lot less effort on you. It makes it a lot easier to have confidence in recovery. And then, yeah, as I say, we review and and we reapply. So we work through that diff table. We say, hey. Suspicious. Yeah. We're gonna go through all of those. Put them in the bad bucket, then look at the unclassified. Some of those might well be bad stuff as well. Once we've decided everything that we do want to roll forward, we mark them for roll forward. Click the button. That will then roll them forward into a restored directory. So we've restored the directory using our regular ADFR process. So you've got that already as part of identity resilience. Now you just have this extra option for clean recovery, which will replay those transactions. And, again, candidly, you know, we're not covering absolutely everything here. So if we think about how active directory forest recovery works, we're gonna roll back to a clean point in time. So everything in the directory is back as it was at that clean point in time. Not every transaction is guaranteed to be captured in that diff. So, some of this is by design. So things like passwords, we're gonna roll you back to a specific point in time, so the passwords are all gonna be as they were at that point in time. If you've been, if you've been a victim of a directory breach, you should be planning in credential rotation as part of that process. You shouldn't just be going, hey. Okay. We'll just put everyone's password back as it was and happy days. Things like DNS group policy and some of the stuff that lives in SysVol, it will be rolled back to that clean point in time, won't necessarily be rolled forward, using the roll forward process. Because, again, there may be stuff in, for example, SysVol that you don't want to... You don't wanna roll forward there. So plan for, plan for manual, manual processes there, potentially. Downstream are precinct. So if you have, you know, if we if we have things like, SAML SAML applications, you've got things that are syncing into Entre and all all of this. If the metadata there has changed, you're probably gonna have to provide the new metadata to to connect those things things back up. And then at the very bottom, persistence older than your baseline. So if you started taking a backup today, but you were compromised three weeks ago, you don't have a clean point in time to recover to. So make sure you're you're already taking these backups, and, hopefully, you're taking these backups anyway. But, you know, we need to make sure that we're taking these backups. One other thing that actually have missed off this slide is how often you're taking these backups. So I do sometimes speak to customers, and they're like, you know, maybe we just wanna take a backup of active directory once a week. I say, well, that is fine. That gives you a granularity of weekly when it comes to performing a forest recovery. But then if we start thinking about something like roll forward, if the diff... If the time difference between the point that you need to recover to and now is almost a week, the roll forward process is gonna take longer because there's gonna be more transactions to roll forward. So, yeah, just bear all of those things in mind. Some things to bear in mind, in terms of, you know, how how you, how you actually get access to this. So, Rubrik Identity Resilience Enterprise Edition. So the the the product previously known as Rubrik Identity Resilience, we now have, Foundation Edition and Enterprise Edition in there. You'll also need, your Rubrik Secure Vaults to be running CDM nine six one or later. I think it's actually nine six one patch one or later now. Make sure you have that clean snapshot coverage. So if we don't have a baseline, we can't do a diff. If you don't take a backup until the point that you're compromised, you don't have a clean point to roll back to. This seems like... It seems such such a basic thing to to have to kind of go go through, but it's really important that you have that clean point in time. There's some change auditing that you need to turn on. So one of the things that we do outside of the fact that we're doing that diff of, you know, what the configuration is between those two points in time, we actually independently capture all of the changes that happen in the, in in the directory. We do that, and then we correlate that against the actor that made those changes. And that can be really important when it comes to classification because if you know that a specific identity was compromised at a specific point in time, that's the kind of information that you can put in as an IOC, and that helps you to, to better classify. So, yeah, change auditing turned on. That's in that's in the docs at docs.rubric.com. And then make sure you'd put a drill in the calendar. So this is this is one of the things I can't remember if I've got a slide covering this. I think I have in a moment. But you can actually use the whole roll forward process and just cancel at the last step. So you run you run the recovery into some sort of isolated isolated recovery environment. You run the diff process. That will show you how things have changed over time. You can run through that whole process of classifying and just choose not to roll forward at the end. That gives you an easy way to test all of all of this works. So, yeah, do make sure you test these things because muscle memory is really important. If you need to make these decisions at 02:00 in the morning, everyone's a bit sleepy. If you've done the drills already, you will have that muscle memory. So, yeah, there we go. So we've got about two minutes before we're gonna hand over to Delaney. I can see Delaney is online, so this is all great. I just wanna kind of wrap up with a couple of things. So what you'll find is, there's two QR codes on the screen there. The top one, this one here, will take you to the guided lab. I'm just gonna drop the link into the chat as well. And I dropped the link into the chat as well using using my skills of copy and paste. There we go. So if you don't wanna trust if you don't wanna trust that QR code and, you know, some security people would tell you you shouldn't trust QR codes, there's a URL that will take you directly to the roll forward workshop. And you can you can absolutely... You know, that that link is valid, at least for the next couple of weeks. So if you don't have time to go through it right now, just save the link. You can go through it tomorrow, the next day. Feel free to share it with your colleagues. You know, if they weren't able to make it along to this webinar. And, yeah, you can go through that whole process and kinda figure out what's what's what's kinda working on it. Next thing is we also have... So I mentioned the idea of a tabletop. So we have this thing called, full access. And... Come on, Kev. Get with the program. Learn how to paste. So that bottom QR code will take you to this engage.rubric.com page. So we have this, that is happening, I wanna say, on the twenty eighth of this month. And I'm just double checking. Yes. Twenty eighth of, twenty eighth of this month, there's a full access. So if you wanna go along, if you wanna join that, again, it's it's a webinar format. Everyone's gonna go through the whole... Go through the process together. We've had lots of really good feedback in terms of, you know, what this actually looks like and how much people learn just by going through these processes before, you know, before the worst thing actually happens. Finally, what I wanna say is at the bottom there, if you are, you know, if you if you are interested in learning more about this, there will be someone reaching out to you. Me... If you if you take a meeting with them, there's a $150 Nike gift card for for everyone who takes takes those meetings. So they'll go through. They'll talk to you. You know, if you're an existing customer, they'll chat to you about licensing, the Rubik's secure vault versioning, snapshots, auditing, all of that good stuff, will be in there. But with that said with that said, I have... My clicker stopped working. There we go. I am gonna hang around in the chat for, probably for the rest of this webinar. If you have any questions, please do drop them in the q and a, and I'll try my best to, to answer them. I'll stay out of the chat because, you might wanna drop some chat in with with what's about to happen. But on that note, I'm gonna hand this across to, my esteemed colleague, Delaney. Would you like to drop drop up on stage, and I will, leave leave the folks be? Absolutely. Thank you, Kev. That's wonderful. Thank you, Kev, and thank you, Rubrik. What is up, Rubrik? So excited to host some trivia for you all today. Let's have some fun, shall we? So I'm now gonna share our game. So everyone, go ahead and scan this QR code to get connected. We've got our back to the future day trivia challenge. So scan this QR code. You can enter this game PIN 848606 as you see on the screen here. Once people join, then we'll begin, and there may be prizes at stake. So may or may not be prizes just so you know, just to motivate you to play here. We've got 10 people joining. Nice. Everybody's joining. Amazing. I'll give it another couple of minutes just so we can get connected to this route... To this Kahoot. So, yeah, scan this QR code, put away Google, put away any, AI Googling here. You're gonna use your brains. We're gonna remember what we can about back to the future here, which we love. Classic film here. And we'll give it another couple of seconds. I know we've got 25 folks joining, waiting on a few more to join. You'll scan this QR code. You'll enter this 848606, that code. Yes. I love seeing the thumbs up and the hearts and the claps. Woo woo. In the mood to play some trivia today. Alright, folks. Looks like we have 30 of us. I'll give it another twenty seconds before we kick things off, before we jump on into some trivia. And, again, keep in mind, there there are prizes at stake, so you wanna answer as quick as you know it. Alright? With that, everybody, let's begin. Okay, everyone. We got our quiz. Our first question is, what is the license plate of the DeLorean? Alright. We got ten seconds to get those answers in. Get them in. Get them in. You have five, four, three, two, and one. If you set out a time, you were correct, which looks like 11 folks were correct. Nicely done. Nicely done, folks. Alright. That is how quick we roll here. Moving on just like that to question number two. Who was originally cast to play Marty McFly and was replaced once filming was underway? I will ask that again, and then, again, you will have the ten seconds to get those answers in. We got a multiple choice as well, so you'll be able to see those quick. Who was originally cast to play Marty McFly and was replaced once filming was underway? Alright. That is either Rob Lowe, Eric Stoltz, Crispin Glover, or Emilio Estevez. We got a couple more seconds here. Ten seconds. Oh, alright. We got 25 of 31 answers, and you have three, two, and that is time. If you said Eric Stoltz, you were correct. Nice. Which looks like we're with the majority here. Alright. You all know you're back to the future. Let's keep it moving on to question number three. What is the name of Marty's band from battle... The battle of the band's audition? What is the name of Marty's band from the battle of the band's audition? Oh, yours is just showing shapes instead of text as answers. So you're not seeing the options as the answers, Rodrigo. Is that what you're saying? Let me know if anybody else is having that issue here. Alright. Interesting. Try to give it a quick refresh, Rodrigo. That might help. Let me know if anybody else is having that issue here. But I'm gonna go ahead and reveal question number three. What is the name? We got the Earth Angels, the Johnny b's, the Pinheads, and the Starlighters. Ten seconds remain. Alright. It seems like most... Everybody is also able to see the answers. That's great. We got three, two, one. And if you said the pinheads, you were correct, which looks like, again, that is a majority here. So we're we're crushing it. Nicely done. Alright, folks. Moving it on to question number four. What is Lorraine McFly's maiden name? Lorraine McFly. What is Lorraine McFly's maiden name? We have Brown, Thompson, Klein, or Baines. Oh, they're getting them in quick, folks. We got ten seconds left. If you've not selected your answer, do so in five, four, three, two, and one. You know what? We're crushing it here. The majority has gotten it right most every question so far. It was Banes. If you said Banes, you were correct. Okay. Moving on just like that to question five. In early scripts of back to the future, the original time machine was a what? In early scripts of back to the future, the original time machine was a... What was it? Was it a washing machine, a refrigerator, a phone booth, or it was always a car? Ten seconds to get those answers in. Select a guess. If you don't know it, it's always better to guess. You got five, four, three, two, and that is time. It was refrigerator. If you said refrigerator, this one was a tougher one. So nicely done, those who got refrigerator here. Alright. Welcome in if you're just joining. Alright, folks. Here's question number six. What is the name of the farmer who owned the land Twin Pines Mall was built on? What is the name of the farmer who owned the land Twin Pines Mall was built on? Is it Pear, Pine, Peabody, or Parker? We have our alliterative choices here. Which one is it? Ten seconds left to choose. Ademal, a bygone era. You have three, two, one. That is time. Alright. If you said Peabody, which 20 of you did, you were correct. Nicely done. You're crushing it, folks. Okay. Moving on just like that. Question number seven. What time did lightning hit the clock tower on 11/12/1955? What time? Was it 10:04, 10:44, 11:44, or 11:59? Ten seconds remain. What time? You have five, four, three, two. Get them in. That is the final second. If you said 10:04, you were correct. Nicely done, which I'm seeing the majority did. Okay, folks. Remember, it's always better to get a guess in than leave it blank. Alright. Question number eight. Which character was played by bassist Flea in back to the future two and three? Flea from, I believe it's, yes, Red Hot Chili Peppers. Is that right? Sorry if I'm incorrect. But bassist Flea, infamous bassist, what character did Flea play? Three d, Match, Zane, or Needles? Was it three d, match, Zane, or Needles? You have five, four, three, two, and time. 20 of you were correct with needles. Nicely done. Needles. Fleet plate needles. You know, great names both. Alright. Question number nine. Here we go, folks. What is Chuck Berry's cousin's name? What is Chuck Berry's cousin's name? Is it Melvin, Marlon, Marvin, or Milton? You don't have to know, back to the future to see this to know this. You got ten seconds. What is Chuck Berry's cousin's name? You got m names here. 54. Get a guess in. You got 321. If you said Marvin, you were correct. Nicely done. 19 folks got it correct. And now we're moving on to question 10. We're a third of the way through with our questions for the day, folks. What is the name of Marty's incarcerated uncle? Is it Johnny, Joey, Jimmy, or Jackie? Johnny, Joey, Jimmy, or Jackie? Marty's incarcerated uncle. You have five, four, three, two, and time. If you said Joey, you were correct. Alright, folks. Moving on. Up next, we have question number 11. I'm seeing currently... I just wanted to see... Do a check-in with our top three folks. And we have MK Ultra, Adrian m, and Westover currently in our lead with the top three places, but everything could change as we move on to question 11. Which character says if you let people walk over you now, they'll be walking over you for the rest of your life? Is it Marty, Doc, Goldie, or Lorraine Baines? You have ten seconds remaining. Five, four, three, two, and that is time. This one was a tougher one. We had a little bit of a mixed bag here, but it's Goldie. Goldie is the correct answer. Alright, folks. Moving on to question number 12. How slow are Doc Brown's clocks set in 1985? How slow are Doc Brown's clock set in 1985? Is it fifteen minutes slow, twenty minutes, twenty five, or thirty minutes? Ten seconds remain. Five, four, three, two, and time. Alright. This one was a tricky one. This is our first one where we haven't had the majority in the right answer. But if you said 25, you got it right. Okay. Question 13. Which of the following people is not an immediate family member of doc Brown? Which of the following people is not an immediate member of doc Brown's family? Is it Verne, Lloyd, Clara, or Jules? Verne, Lloyd, Clara, or Jules? Which one's not an immediate family? You have five, four. Quick. Get them in. Three, two, one. If you said Lloyd, you were correct, and 15 of you did. So nicely done. Alright, folks. We got some back to the future experts here. Moving on to question number 14. How does Marty receive his termination notice in 2015? How does Marty receive his termination notice in 2015? Is it email, text, mail, or fax? The double tie outfit, iconic. Oh, if you said fax, you were correct. Nicely done. If you said fax, you were correct. Alright. Next up, question number 15. Halfway through our trivia questions here. What is mad dog Tannen's actual name? What is mad dog Tannen's actual name? Is it Buford, Bill, Biff, or Buck? Ten seconds left. 5, three, two, one. The correct answer was Buford. If you said Buford, you got it right. And 17 of you did. Nice. Okay, folks. Moving on. Question number 16. Which actor from back to the future did not reprise his or her role in back to the future two? Which actor did not reprise his or her role in back to the future two? Was it Claudia Wells, Crispin Glover, both of the above, none of the above? So you got one or the other, basically. One or the other, both, or neither. Alright. You have five, four, three, two, and time. Alright. Most people did not get this one. If you said both of the above, which three of you did, you got it right. Nice. Alright. That was a tricky one. Moving on to question number 17. After receiving Grey's Sports Almanac from his older self, what does Biff get rich betting big on his 20 birthday? Is it the World Series, heavyweight boxing, horses, or the lottery? Biff wins again. Betting on what? You have five, four, three, two, one. The correct answer was horses, and the majority of you got it correct. Nicely done. Yes. Betting on horses. Alright. Moving on to question number 18. Which real life musician recorded the guitar solo used during the brain melt scene? We've got a real life musician that recorded that guitar solo. Was it Steve Vai slash Eddie Van Halen or the Edge? Some iconic guitarists here. Which one is the correct answer? That brain melt scene. We have five, four, three, two. And all those answers in, it was Eddie Van Halen. If you said Eddie Van Halen, which most of you did, kudos to you. You got it right. Alright, folks. Moving on to question number 19. In part three, the canyon previously known as Shonas Ravine is renamed what? Brown Gorge, Einstein Canyon, McFly Gully, or Eastwood Ravine? You have five seconds remaining. And answers are in. Majority got the right answer. It is Eastwood Ravine. Nicely done. It is Eastwood Ravine. Okay, folks. Moving on. We got question 20. We're now two thirds of the way through. We'll do a check-in with where we're looking with the scores after this. What was Riverside Drive and Hill Valley renamed in 1985? Main Street, Hill Street, John F Kennedy Drive, or Riverside Avenue? What was Riverside Drive and Hill Valley renamed in 1985? Ten seconds left. Five, four, three, two, one. Time. We got John F Kennedy Drive is the correct answer, and majority got it. Let's do a check-in here to see where our top three placements are. Oh, okay. So far, MK Ultra, you are still in the lead. Right, below you is Adrian m, and then Trey has come out now. It's a very close game here as you can see. So don't give up yet, folks. Plenty of points left to be scored as we move on to question number 21. What is the last... The very last line of the Back to Future franchise? What is the very last line? Is it where we're going? We don't need roads. Great, Scott. Nope. Already been there. Or your future is whatever you make it, so make it a good one. 54321. The correct answer was nope. Already been there. Yeah. You know, majority went with your future is whatever you make it, so make it a good one. That would be the fantastic choice. Right? But... Nope. Already been there. Funny last line, and there it is. Five of you got it right. So kudos. Here we go. Question 22. Which year did Marty spend the most time visiting? Which year did Marty spend the most time visiting? Is it 1885, 1955, 2015, or all equal? You have five, four, three, two, one. There we go. Most people got it right. It was 1955. Nicely done. 1955. Okay, folks. Moving right along to question 23. Which other people besides Marty and Doc time traveled in the DeLorean? Besides Marty and Doc, who else traveled in the DeLorean? Is it Jennifer, Einstein, Biff, or two of the above? So we have a... Not all of the above, but two of the above option here. Ten seconds remain. Five, four, three. Oh, we didn't even need all that time. We got two of the above. Yeah. You know, that one was so specific that it had to be right. So kudos to you all. 14 of you got it right. Nicely done. Moving on. Question 24. Which song is playing during the end credits of Back to the Future? The end credits roll. What song is playing? Power of Love, Back in Time, Hip to be Square, or the heart of rock and roll. All excellent songs. You have ten seconds remaining. Five, four, three. Oh, majority got it right. It was back in time. Nicely done, folks. Yes. Back in time was correct. Okay. Moving on. Question 25. What is used to sober dock up in a hurry in Back to the Future three? What is used to sober doc up in a hurry in Back to the Future three? Is it hooch, Tabasco, wake up juice, cactus oil? What an image of doc here. Ten seconds remain. Five, four, three, two, and time. It's wake up, Juz. Yeah. Had to be wake up, Juz. Nice week done. If you said it, you got it right. Okay. Moving on. Question 26. Which arcade game must you play with your hands in back to the future two? Which arcade game must you play with your hands in Back to the Future two? Is it Duck Hunt, Paperboy, Wild Gunman, or Burger Time? 54321. Alright. Wild gunman was correct. Nicely done. Those of you who got it, Wild gunman was the answer we were looking for. Folks, we only have a few questions remaining, so lock in. What year does Gray's Sports Almanac go up to? What year does Gray's Sports Almanac go up to? Is it 1995, 2000, 2010, or 2015? Answers are flying in. Everybody else, you got about eleven seconds. Quick. Get them in. Get them in. Press submit. You have 54321. It was 2000. If you said 2000, you were correct. Nice. Okay. Moving on, folks. We have three questions remaining. Which Hill Valley family sold horse and buggies in the eighteen eighties, Studebaker's in the nineteen fifties, and Toyota pickups in the nineteen eighties? Is it the Stadlers, the Tannons, the Wilsons, or the Peabody's? It's... Yeah. Five answers left. Oh, it was the Statlers. If you said Statlers, you were correct. Nice. Nicely done. Okay, folks. Moving on. Question 29. Our penultimate question of the game. Which 50 sitcom has 1985 Marty seen as a rerun? Was it I Love Lucy, Leave It to Beaver, The Honeymooners, or Father Knows Best? Five, four, three. Oh, yep. The honeymooners. Nicely done. Majority got it right. Alright, folks. It's been... The majority has been correct most every, question here. So nicely done. And this brings us to our final question of today's trivia game. Which of the following items is not in the 2015 antique shop window? Which of the following items is not in that antique shop window? Is it a dust buster, a stuffed Roger Rabbit lava lamp, or Atari console? Wow. Quick quick with those. The correct answer was Atari console. If you said Atari console, you got it right. That was a tough one, folks. Alright, everyone. This brings us to the end of our game. The end of our game, everybody, and the winners are going to be announced. Can I get a drum roll, please? Hey. We got our podium here. Adrian came in third place, Adrian m. In second place, we had Trey. And in first place, we had MK Ultra, Adrianne m, Trey, and MK Ultra. Congratulations. You are our top three winners for the day. But MK Ultra, I mean, kudos to you. You got 28 out of 30 correct. Impressive. I mean, 24 out of 30, 27 out of 30. Incredible. MK Ultra, you're taking home that gold medal. Everyone, thank you all so much for playing. I hope you had a great time. I had a great time hosting you all. Nicely done, everyone. And, yes, as, Rachel said earlier, if you can send those three full names here in the comments... Let's see. We got amazing. We're getting those names in. And thank you all again so much for joining. I hope you had a lovely time. I had a lovely time hosting you. Congrats to Tremaine. Congrats to Adrian Martinez. I'm writing those names down now. And congratulations to everyone. You were all were fantastic. Thank you so much. And, Kev, shall I pass it back on over to you to close this out? There we go. There we go. I, completely wasn't prepared for that then. I. was too too impressed with the Back to the Future nerds. But... Yeah. Incredible. Right? That was amazing. Amazing work, everyone. Yeah. So... Yeah. And thank you thank you, Delaney, so much for for hosting the trivia. I was having so much fun just kinda trying to... I I would have got maybe half of them right. So, Same. It's that. It's that for me. yeah. Yep. Awesome. Cool. So, we... We're wrapping up a little early, which is always nice. But, yeah, thank you once again to everyone, for for joining in. Hopefully hopefully, the, like, the bit at the beginning was part... At least partially useful to you. Again, the, the QR codes were there on the screen. I think we'll get those added into... Or we'll get the URL sent out to you in, in a post event email as well. And if you'd like to learn anything more, when somebody reaches out to you, if you take a meeting with them, again, there's a 100 and a $150 Nike gift card as well for your troubles. So, yeah, thank you very much for that. But on that, I think we can, we can probably wrap up at that point. Awesome. Thanks so much everyone. Have a wonderful day. Congrats to the winners. Well done all. Cheers. Thank you.