Two systems are in scope: the Splunk instance published for this event, and the challenge instance started from your own dashboard. Nothing else on the host, the network, or the wider internet is a target. The portal itself is not a target.
Each team has its own credentials and its own container. You cannot see another team's progress and they cannot see yours. Attempting to reach another team's instance, or to use another team's credentials, is not allowed.
Twenty findings, graded on the server. There is no penalty for a wrong answer and no scoreboard signal to read; submissions are rate limited only to keep automated guessing out. Confirm all twenty and your flag is released on the investigation page.
Your container is yours to break. It is reclaimed automatically after a period of inactivity, and restarting gives you a clean copy at any time. Denial of service against the shared platform is not a valid technique here.
Work as a team, use any reference material you like, and do not share answers or flags between teams. Questions about the environment go to the organiser rather than into the environment.