Detective Casey

The Case Vault

These organizations were breached. Your mission: review the digital evidence, reconstruct the events, and uncover who was behind it and how they got in.

Easy

This is the start of your KC7 journey. You don’t need to know much— we give you the questions and starter KQL so you can focus on the story and how evidence fits together. You’ll leave with quick wins and the core “investigator mindset.”

A Rap Beef: An Intro to Security Investigations

A Rap Beef: An Intro to Security Investigations

Easy
50 mins
86743 players
950 pts
How to play KC7

How to play KC7

Easy
10 mins
2635 players
190 pts
CloutHaus: Social Media leads to Compromise

CloutHaus: Social Media leads to Compromise

Easy
4 hours 0 mins
6193 players
1170 pts
A Scandal in Valdoria: A Political Mystery

A Scandal in Valdoria: A Political Mystery

Easy
6 hours 40 mins
19434 players
2430 pts
Valdoria Votes: A Political Mystery (Part 2)

Valdoria Votes: A Political Mystery (Part 2)

Easy
4 hours 10 mins
3247 players
2750 pts
Jojo's Hospital: A Ransomware Investigation

Jojo's Hospital: A Ransomware Investigation

Easy
2 hours 30 mins
4025 players
610 pts
Solvi Systems: A tale of Supply Chains and ICS

Solvi Systems: A tale of Supply Chains and ICS

Easy
2 hours 30 mins
3077 players
2860 pts

Moderate

In this section, the training wheels start to come off. You’ll translate questions into your own KQL and spot repeating patterns. Expect growing confidence and fewer “wait
what is that?” moments.

Frognado in Valdoria: A Political Mystery
Locked

Frognado in Valdoria: A Political Mystery

Moderate
26 hours 40 mins
2767 players
1690 pts
Critical Compromise In Chicago - ICS
Locked

Critical Compromise In Chicago - ICS

Moderate
14 hours 10 mins
1015 players
2870 pts
Envolve Labs: With a twist!
Locked

Envolve Labs: With a twist!

Moderate
5 hours 0 mins
1033 players
950 pts
Castle & Sand: A Beachy Case of Ransomware
Locked

Castle & Sand: A Beachy Case of Ransomware

Moderate
95 hours 49 mins
1618 players
13050 pts
AzureCrest - The full version
Locked

AzureCrest - The full version

Moderate
45 hours 0 mins
2289 players
8790 pts
Turkey Bowl
Locked

Turkey Bowl

Moderate
13 hours 20 mins
552 players
2590 pts
Krusty Krab: A Intro to Pivoting and Analysis
Locked

Krusty Krab: A Intro to Pivoting and Analysis

Moderate
22 hours 54 mins
1232 players
7360 pts
French Socksess Story
Locked

French Socksess Story

Moderate
1 hours 20 mins
442 players
2080 pts
HopsNStuff: An Easter APT hunt
Locked

HopsNStuff: An Easter APT hunt

Moderate
3 hours 40 mins
859 players
14265 pts

Challenging

Now you choose where to look and why. You’ll connect clues across multiple logs, write multi-step queries, and explain your reasoning like a pro. Mistakes are part of the reps—your intuition gets sharper every case.

Inside Encryptodera: An Insider Threat Scenario
Locked

Inside Encryptodera: An Insider Threat Scenario

Challenging
25 hours 0 mins
506 players
3990 pts
Galaxy Neura
Locked

Galaxy Neura

Challenging
2 hours 0 mins
246 players
1265 pts
System Shutdown at Azure Crest! (Short Version)
Locked

System Shutdown at Azure Crest! (Short Version)

Challenging
1 hours 30 mins
571 players
4800 pts
Balloons Over Iowa
Locked

Balloons Over Iowa

Challenging
5 hours 0 mins
2263 players
4405 pts
Scholomance: Secrets and Lateral Movement
Locked

Scholomance: Secrets and Lateral Movement

Challenging
53 hours 4 mins
367 players
5640 pts
Dai Wok Foods: A Challenging Culinary Mystery
Locked

Dai Wok Foods: A Challenging Culinary Mystery

Challenging
37 hours 20 mins
525 players
11600 pts

Hard

In these games, guidance is minimal and the intrusion is messy (just like real life). You’ll sketch a plan, pivot across data sources, validate each finding, and adjust on the fly. Expect fewer hints, more strategy, and satisfyingly hard-won answers.

Spooky Sweets: Sweet Sweet Pivots
Locked

Spooky Sweets: Sweet Sweet Pivots

Hard
113 hours 20 mins
354 players
7640 pts
Sunlands: A Tough Space Investigation
Locked

Sunlands: A Tough Space Investigation

Hard
33 hours 0 mins
358 players
8437 pts
World Domination Nation
Locked

World Domination Nation

Hard
12 hours 40 mins
380 players
8220 pts
Ship ahoy! An Unusual Ransomware Investgation
Locked

Ship ahoy! An Unusual Ransomware Investgation

Hard
11 hours 0 mins
101 players
2320 pts

Don't Bother

Fleeeee!!! I mean, err... You’re driving the whole investigation—scope it, hunt it, prove it, tell the story. We give you the case; you deliver conclusions backed by evidence and a clean narrative. Expect portfolio-ready work and the “I can handle new stuff” confidence that senior analysts rely on.

MCJ Walker: An Impossible Identity Crisis
Locked

MCJ Walker: An Impossible Identity Crisis

Don't bother
70 hours 0 mins
458 players
15265 pts
A Rap Steak: A Tough Musical Affair
Locked

A Rap Steak: A Tough Musical Affair

Don't bother
25 hours 0 mins
168 players
19010 pts

Arcade

This is a collection of games outside of our learning paths

DAILY7 🌎
Locked

DAILY7 🌎

Challenging
-
3830 players
7346 pts
KQL 101: An introduction to Kusto Query Languge

KQL 101: An introduction to Kusto Query Languge

Easy
1 hours 20 mins
2281 players
1645 pts
KQL 201: An Intermediary Course on KQL
Locked

KQL 201: An Intermediary Course on KQL

Moderate
16 hours 40 mins
136 players
1070 pts
VirusTotal Fundamentals

VirusTotal Fundamentals

Easy
3 hours 0 mins
1001 players
2620 pts
Titan Shield: A showcase of Microsoft Defender XDR

Titan Shield: A showcase of Microsoft Defender XDR

Easy
6 hours 0 mins
3916 players
4000 pts
Empire Health
Locked

Empire Health

Challenging
1 hours 30 mins
138 players
1195 pts
A Storm Is Brewing In the Lab
Locked

A Storm Is Brewing In the Lab

Challenging
70 hours 40 mins
931 players
5670 pts
Whiskermania: An Intro to Network Concepts
Locked

Whiskermania: An Intro to Network Concepts

Challenging
8 hours 59 mins
107 players
2275 pts
Decoding101: A beginner's guide to decoding

Decoding101: A beginner's guide to decoding

Easy
1 hour
55 players
745 pts