Team Composition

Each team should consist of 4–5 students. Every student is assigned a role that comes with unique responsibilities:

Role	Description
Analyst	Works inside the KC7 platform to conduct technical analysis. Solves puzzles and queries logs to identify malicious activity.
Investigator	Explores the physical artifacts placed around the room. Builds the theory of who did it and why. Also speaks with the Investigative Database.
Case Manager	Maintains the team’s casebook. Coordinates submissions to the Investigative Committee. Leads the final attribution decision.
(Optional) Presenter	(If used) Helps the team organize and deliver findings during a wrap-up, if the game concludes with student presentations.

Roles are enforced by game rules: students must operate within the boundaries of their assigned roles, reinforcing teamwork and accountability. Players cannot switch roles mid-game unless facilitators explicitly allow it (e.g., to address absences).