Learn cybersecurity by solving mysteries.

In KC7, you investigate real intrusions
and build the skills to become a cybersecurity analyst.

Case № 01 · A Rap Beef
Dwake vs. Present

Two hip-hop artists, Dwake and Present are beefing. After Dwake embarrassed Present in a diss track, Present hired someone to retaliate.

You are a security analyst defending Dwake’s label. Your homeboy in the cyber underground passed along a tip. Someone at IP 18.66.52.227 was poking around the label's website in early April. Let's investigate.

Four rows. Someone was clicking around your website. But what were they looking for?

They visited Dwake's profile, pulled his email address, and typed a few revealing searches along the way.

One row stands out.

Now that they have finished dissing Dwake, the operator gets back to business. They want to reset his password and take over his account.

Luckily for them, Dwake revealed a few useful details in his verse.

Exhibit B · diss track, bar 2 & 5
"Got the Washington name from my mom's side, son..."
"Used to play with little Fluffy, now I'm runnin' with the wolves..."

At OWL Records, password resets require two security questions: your mother's maiden name and the name of your childhood pet.

Question 1 · 10 pts
Run the query on the right. How many rows came back?
Database › owl_records
Query
// tip from the homie: someone from this ip was poking the site
InboundNetworkEvents
| where timestamp between (datetime("2024-04-10") .. datetime("2024-04-11"))
| where src_ip has "18.66.52.227"
Results
// click "Run" to execute

Trusted by cybersecurity professionals worldwide

100K+

Analysts Trained

3M+

Questions Answered

200+

Events Hosted

100%

Free To Play

How It Works

KC7 is a game that teaches cybersecurity. You investigate realistic breaches by analyzing actual logs and data.

Casey the raccoon detective inspecting a laptop with a magnifying glass
1

Get a Real Scenario

You're dropped into an actual breach. A company's been hacked and needs your help. Read emails, check login records, and investigate suspicious files to figure out what happened.

Casey the raccoon typing on a laptop
2

Follow the Evidence

We guide you through analyzing the data using KQL, the same query language used at top companies. You'll spot phishing emails, trace suspicious logins, and track down attackers.

Casey the raccoon holding a trophy
3

Solve the Mystery

Answer questions to prove what happened. Each solved case builds your investigative instincts. After a few cases, you'll start to think like a professional SOC analyst.

Every cyber intrusion has a story.

We turn realistic cyber incidents into playable investigations where you learn cybersecurity by solving the case. Explore 40+ cases in the vault, from beginner to expert.

Choose Your Career Path

Follow structured learning paths designed around the skills real security teams hire for. Each path includes hands-on investigations and leads to a professional certificate.

Security Analyst I

As a Junior Security Analyst, you will learn how to identify basic...

7 modules ~18 hours
Explore Path

Security Analyst II

As a Security Analyst II, you will begin to apply common external...

6 modules ~42 hours
Explore Path

Security Analyst III

As a Security Analyst III, you will take alerts or indicators of...

7 modules ~136 hours
Explore Path

Trusted by Security Professionals

Real results from real people who've used KC7 to launch their cybersecurity careers

"The fun I had with those modules completely changed my life. I landed a cybersecurity role in threat hunting because of KC7. No other platform could’ve given me that."

Jibby Saetang
Security Researcher

"KC7 is a fantastic tool for ramping up on KQL, intrusion analysis, and pivoting across large data sets. It was instrumental in helping me transition from a technical product management role to threat intelligence."

Bailey Bercik
Senior Threat Intelligence Analyst

"I was so focused on “playing the game” that I didn’t even realize how much I was learning. Fast forward less than six months from being introduced to KC7, and I found myself working in a real SOC!"

Trey Hopkins
Cybersecurity Specialist

"It is because of KC7 that I’ve gotten into the cybersec field, so thank you for making such an incredible tool."

Clarisa Ortega
Student

"KC7 exceeded my expectations. It transformed my investigative mindset far quicker than other platforms."

Sentinel
Lead Security Analyst

"The scenarios felt real, the challenges had purpose, and I walked away with skills I could apply straight into my day to day work."

Ahmad
Senior Security Analyst

Top Investigators

Join 146,565 players competing on the global leaderboard

RankInvestigatorScore
🥇
Ten Minute KQL (YouTube Channel)Ten Minute KQL (YouTube Channel)
212,534points
🥈
KustoWarriorKustoWarrior
212,534points
🥉
david1a2a3adavid1a2a3a
212,534points
4
SentinelSentinel
212,527points
5
Aurelia Dumitru (Data Protection /WCP3)Aurelia Dumitru (Data Protection /WCP3)
212,527points

Common Questions

Do I need cybersecurity experience?

No. KC7 starts from scratch. If you can read and click, you can investigate. We explain every concept as you go. No prior knowledge of cybersecurity or coding required.

How much does it cost?

For players? Free. Always. KC7 is a nonprofit dedicated to making cybersecurity education accessible to everyone. If you can donate, it helps us reach more people.

How long does a case take?

Beginner cases take 30-60 minutes. Intermediate cases take a few hours. Professional-level investigations can take days to fully complete. You can pause and resume anytime. Your progress is saved automatically.

What will I actually learn?

You'll develop both tangible technical skills and intangible judgment skills. On the technical side: how to query logs with KQL, spot phishing attacks, track malware, and investigate suspicious activity. On the judgment side: pattern recognition, investigative reasoning, and knowing when to dig deeper or move on. This is the secret sauce that most people don't get until years into their career. View full curriculum

Educators & Corporate Trainers

Host your own KC7 event for students or security teams. No cybersecurity expertise required. The platform handles everything.

Host an Event

Latest Insights

Stay updated with cybersecurity trends and KC7 news

Putting KC7 Experience on Your Resume Without Making It Sound Like a Game
May 02, 2026
Putting KC7 Experience on Your Resume Without Making It Sound Like a Game

Part of why KC7 exists is to solve the chicken and egg problem we have in cybersecurity. You can t get the...

Read More
KC7 Foundation Honored with Fayette County Public Schools 2025 Golden Apple Award
September 15, 2025
KC7 Foundation Honored with Fayette County Public Schools 2025 Golden Apple Award

KC7 Foundation is proud to announce that it has been awarded the by Fayette County Public Schools FCPS , recognizing...

Read More
Making the most of KC7
September 02, 2025
Making the most of KC7

Dear New KC7 Player, Welcome to KC7. We re glad you re here. Starting your cybersecurity journey can feel exciting...

Read More

Powered by the KC7 Foundation

With support from our sponsors and community partners.

MicrosoftPatriot Consulting TechnologyWomen In CloudBlacks In Cyber ConferenceGirlSecurity

Ready to Start Your Investigation?

Join 100,000+ people building real cybersecurity skills. Your first case takes just 60 seconds to start.

No Installation Required • Works in Any Browser • Free Forever