# Game Flow

The **KC7 Attribution Challenge** follows a structured gameplay loop in which students collaborate, investigate, and submit findings to earn points. The game is built around real-time movement and role-based responsibilities, unfolding in three core phases:

### 🧭 Phase 1: Game Setup

Before students arrive:

* Prepare and label all **Game Stations** (Arcade, Investigative Committee, Law Enforcement, Chat Booth)
* Place teams at clearly designated **Team Tables**
* Distribute team materials:
  * 1 laptop (for Analysts)
  * 1 case book (for Case Manager)
  * 2 scratch pads (for notes)
  * 1 document folder (for storing evidence)
  * 1 visible team name sign

> 🔧 Tip: Keep a printed map of the room layout and roles chart at each table.

Once students are seated, facilitators:

1. Assign or confirm roles for each player
2. Introduce the **ransomware scenario**
3. Briefly explain the **win condition**: the team with the most points wins

Then, say: **“The investigation begins now.”**

### 🚀 Phase 2: Active Gameplay

This phase makes up the bulk of the session and runs in **real time** (typically 60–90 minutes).

#### 💼 What Players Are Doing

Each player acts based on their **role**:

* **Analysts**: Use the KC7 platform to investigate log data, emails, and puzzles.
* **Investigators**: Explore physical artifacts around the room, develop attribution theories, and ask questions at the Committee.
* **Case Managers**: Maintain the casebook, guide the team’s strategy, and submit answers to the Committee and Law Enforcement.

All teams work independently and move throughout the room as needed.

#### 🏁 How Points Are Earned

Teams submit their work to the **Investigative Committee** or other stations. If the submission is accurate, thoughtful, or unlocks new progress, the facilitator rewards the team with a **KC7 code** worth points.

**🧠 Examples of Submissions:**

* Solving a puzzle in the Arcade
* Correctly identifying a suspicious IP address or malware
* Filing a criminal referral with supporting evidence
* Asking a clever question that unlocks new information

Each KC7 code is entered into the team's account to log points automatically.

> 🔒 Incorrect submissions are not penalized but may receive hints or redirection.