Running Your Event
The event day is simpler than you might expect. Your main job is creating positive energy while participants investigate - KC7 handles the teaching.
What "Running Your Event" Actually Means
Running a KC7 event isn't like teaching a class where you need to explain concepts and answer technical questions. It's more like facilitating a game night or escape room - you're there to keep energy positive, help people get unstuck, and make sure everyone has a good experience.
Most of your time will be spent circulating, encouraging people, and celebrating small wins. You're not explaining how KQL works or teaching log analysis - the game does that. You're answering questions like "Where do I find the hint button?" and "Can I work with someone else?" and saying things like "That's a great observation!" when someone discovers something interesting.
The Emotional Arc of Event Day
Understanding what you'll feel during the event helps you prepare mentally:
Before participants arrive, you might feel nervous. That's normal, even for experienced hosts. The setup checklist helps channel that energy productively.
During the welcome, you'll be focused on logistics - making sure everyone can access the link, troubleshooting login issues, setting expectations. This is the busiest part for you.
During investigation, things get easier. Participants are absorbed in the game, and you're just circulating and encouraging. Many hosts say this is when they relax and start enjoying themselves.
During wrap-up, you'll likely feel energized by participants' excitement about what they discovered. Even people who didn't finish are usually enthusiastic about what they learned.
How This Section is Organized
Running your event has four distinct phases, and we've broken the guidance into focused resources for each:
Phase 1: Final Preparation (Before Arrival)
The last-minute setup and mental preparation before participants arrive. This is when you test your tech, arrange your space, and take a deep breath. See Pre-Event Setup for detailed preparation steps.
Phase 2: Event Day Execution (Start to Finish)
The complete flow from welcoming participants through the investigation to wrapping up. This includes scripts, timing, and troubleshooting. See Event Day Guide for the complete walkthrough.
Phase 3: Supporting Participants (During Investigation)
How to help people without being a cybersecurity expert - giving hints, managing energy, handling frustration, celebrating discoveries. See Supporting Participants for specific strategies.
Phase 4: Format-Specific Details
Whether you're running in-person or virtual, there are specific considerations that make your event smoother. See In-Person Events or Virtual Events for format-specific guidance.
Quick Navigation
Pre-Event Setup
Event Day Guide
Supporting Participants
In-Person Events
Virtual Events
Closing Your Event
What Most Hosts Wish They'd Known
"I worried too much." Most first-time hosts report being surprised by how smoothly things go. Participants get absorbed in the investigation, and your job becomes easier than you expected.
"The first 15 minutes are the hardest." Getting everyone logged in and oriented takes effort, but once people start investigating, it gets much easier.
"I didn't need to understand the cybersecurity." The game teaches participants. You just need to encourage them and point them toward hints when they're stuck.
"It's okay when people don't finish." The value is in the investigation process, not completion. Someone who completes 5 questions has learned valuable skills.
Ready for event day? Start with the Event Day Guide for a complete walkthrough, or jump to In-Person or Virtual for format-specific preparation.
After your event: See After Your Event for follow-up, feedback, and planning future events.
Last updated