The Case Vault
These organizations were breached. Your mission: review the digital evidence, reconstruct the events, and uncover who was behind it and how they got in.
Easy
This is the start of your KC7 journey. You donât need to know muchâ we give you the questions and starter KQL so you can focus on the story and how evidence fits together. Youâll leave with quick wins and the core âinvestigator mindset.â
 - Recording mic.png)
A Rap Beef: An Intro to Security Investigations

How to play KC7

CloutHaus: Social Media leads to Compromise

A Scandal in Valdoria: A Political Mystery

Valdoria Votes: A Political Mystery (Part 2)

Jojo's Hospital: A Ransomware Investigation

Solvi Systems: A tale of Supply Chains and ICS
Moderate
In this section, the training wheels start to come off. Youâll translate questions into your own KQL and spot repeating patterns. Expect growing confidence and fewer âwaitâŚwhat is that?â moments.

Frognado in Valdoria: A Political Mystery

Critical Compromise In Chicago - ICS

Envolve Labs: With a twist!

Castle & Sand: A Beachy Case of Ransomware

AzureCrest - The full version

Turkey Bowl

Krusty Krab: A Intro to Pivoting and Analysis

French Socksess Story

HopsNStuff: An Easter APT hunt
Challenging
Now you choose where to look and why. Youâll connect clues across multiple logs, write multi-step queries, and explain your reasoning like a pro. Mistakes are part of the repsâyour intuition gets sharper every case.

Inside Encryptodera: An Insider Threat Scenario

Galaxy Neura
System Shutdown at Azure Crest! (Short Version)

Balloons Over Iowa

Scholomance: Secrets and Lateral Movement

Dai Wok Foods: A Challenging Culinary Mystery
Hard
In these games, guidance is minimal and the intrusion is messy (just like real life). Youâll sketch a plan, pivot across data sources, validate each finding, and adjust on the fly. Expect fewer hints, more strategy, and satisfyingly hard-won answers.

Spooky Sweets: Sweet Sweet Pivots

Sunlands: A Tough Space Investigation

World Domination Nation
Ship ahoy! An Unusual Ransomware Investgation
Don't Bother
Fleeeee!!! I mean, err... Youâre driving the whole investigationâscope it, hunt it, prove it, tell the story. We give you the case; you deliver conclusions backed by evidence and a clean narrative. Expect portfolio-ready work and the âI can handle new stuffâ confidence that senior analysts rely on.

MCJ Walker: An Impossible Identity Crisis

A Rap Steak: A Tough Musical Affair
Arcade
This is a collection of games outside of our learning paths

DAILY7 đ

KQL 101: An introduction to Kusto Query Languge

KQL 201: An Intermediary Course on KQL

VirusTotal Fundamentals

Titan Shield: A showcase of Microsoft Defender XDR

Empire Health

A Storm Is Brewing In the Lab


.png)
