They’ve already given away that they use teams to track stuff. I forget the context, but some teams person said that they get less activity after 3:30 in the context of some article about working from home. Revealed that they were tracking mouse usage with teams indirectly.
A simple ctf, demonstrate how to use strings or something in class then give them an elf to run strings on themselves