Game Flow

The KC7 Attribution Challenge follows a structured gameplay loop in which students collaborate, investigate, and submit findings to earn points. The game is built around real-time movement and role-based responsibilities, unfolding in three core phases:

🧭 Phase 1: Game Setup

Before students arrive:

• Prepare and label all Game Stations (Arcade, Investigative Committee, Law Enforcement, Chat Booth)

• Place teams at clearly designated Team Tables

• Distribute team materials:

  • 1 laptop (for Analysts)

  • 1 case book (for Case Manager)

  • 2 scratch pads (for notes)

  • 1 document folder (for storing evidence)

  • 1 visible team name sign

🔧 Tip: Keep a printed map of the room layout and roles chart at each table.

Once students are seated, facilitators:

1. Assign or confirm roles for each player

2. Introduce the ransomware scenario

3. Briefly explain the win condition: the team with the most points wins

Then, say: “The investigation begins now.”

🚀 Phase 2: Active Gameplay

This phase makes up the bulk of the session and runs in real time (typically 60–90 minutes).

💼 What Players Are Doing

Each player acts based on their role:

• Analysts: Use the KC7 platform to investigate log data, emails, and puzzles.

• Investigators: Explore physical artifacts around the room, develop attribution theories, and ask questions at the Committee.

• Case Managers: Maintain the casebook, guide the team’s strategy, and submit answers to the Committee and Law Enforcement.

All teams work independently and move throughout the room as needed.

🏁 How Points Are Earned

Teams submit their work to the Investigative Committee or other stations. If the submission is accurate, thoughtful, or unlocks new progress, the facilitator rewards the team with a KC7 code worth points.

🧠 Examples of Submissions:

• Solving a puzzle in the Arcade

• Correctly identifying a suspicious IP address or malware

• Filing a criminal referral with supporting evidence

• Asking a clever question that unlocks new information

Each KC7 code is entered into the team's account to log points automatically.

🔒 Incorrect submissions are not penalized but may receive hints or redirection.