# Game Flow

The **KC7 Attribution Challenge** follows a structured gameplay loop in which students collaborate, investigate, and submit findings to earn points. The game is built around real-time movement and role-based responsibilities, unfolding in three core phases:

### 🧭 Phase 1: Game Setup

Before students arrive:

* Prepare and label all **Game Stations** (Arcade, Investigative Committee, Law Enforcement, Chat Booth)
* Place teams at clearly designated **Team Tables**
* Distribute team materials:
  * 1 laptop (for Analysts)
  * 1 case book (for Case Manager)
  * 2 scratch pads (for notes)
  * 1 document folder (for storing evidence)
  * 1 visible team name sign

> 🔧 Tip: Keep a printed map of the room layout and roles chart at each table.

Once students are seated, facilitators:

1. Assign or confirm roles for each player
2. Introduce the **ransomware scenario**
3. Briefly explain the **win condition**: the team with the most points wins

Then, say: **“The investigation begins now.”**

### 🚀 Phase 2: Active Gameplay

This phase makes up the bulk of the session and runs in **real time** (typically 60–90 minutes).

#### 💼 What Players Are Doing

Each player acts based on their **role**:

* **Analysts**: Use the KC7 platform to investigate log data, emails, and puzzles.
* **Investigators**: Explore physical artifacts around the room, develop attribution theories, and ask questions at the Committee.
* **Case Managers**: Maintain the casebook, guide the team’s strategy, and submit answers to the Committee and Law Enforcement.

All teams work independently and move throughout the room as needed.

#### 🏁 How Points Are Earned

Teams submit their work to the **Investigative Committee** or other stations. If the submission is accurate, thoughtful, or unlocks new progress, the facilitator rewards the team with a **KC7 code** worth points.

**🧠 Examples of Submissions:**

* Solving a puzzle in the Arcade
* Correctly identifying a suspicious IP address or malware
* Filing a criminal referral with supporting evidence
* Asking a clever question that unlocks new information

Each KC7 code is entered into the team's account to log points automatically.

> 🔒 Incorrect submissions are not penalized but may receive hints or redirection.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.kc7cyber.com/camp/kc7-attribution-challenge/game-flow.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.