Opportunity brief
Blue Team Investigation & Incident Response Challenge
- Modern cyberattacks can spread across accounts, systems, and cloud environments within minutes. Identity Under Attack puts you in the role of a defender, where your team must investigate a simulated cybersecurity incident, connect the evidence, uncover what happened, and determine how the attack unfolded.
- Investigate the evidence
- Connect the clues
- Reconstruct the attack
- Contain the threat
- Make the right decisions under pressure
The Challenge:
Teams will investigate a realistic enterprise security incident involving multiple digital traces and suspicious activities. Your mission is to:
- Identify suspicious activity
- Analyze investigative evidence
- Correlate critical findings
- Reconstruct the incident timeline
- Determine the attacker's path
- Recommend appropriate containment actions
No prior Blue Team competition experience is required. Observation, logical thinking, teamwork, and investigative skills matter most.
️Competition Format:
- Mode: Online
- Duration: 4 Hours
- Team Size: 1–3 Participants
- Eligibility: Open to undergraduate and postgraduate students from all colleges and universities
The challenge follows a single-round investigation format, where teams progressively uncover the larger incident by connecting evidence across different stages.
Rewards:
- Winner — ₹5,000
- 1st Runner-Up — ₹3,000
- 2nd Runner-Up — ₹2,000
Certificates of Achievement for winners and participation certificates for eligible participants.
Guidelines:
- Complete the challenge within the allotted time.
- Publicly available cybersecurity resources and technical documentation may be used.
- Collaboration is permitted only among registered team members.
- Do not share challenge materials, solutions, or findings with other teams.
- Plagiarism, unauthorized collaboration, or unfair practices may result in disqualification.
- The decision of the organizing committee will be final and binding.
Ready to Investigate?
- If you enjoy cybersecurity, digital forensics, incident response, OSINT, and solving security mysteries, this challenge is for you.
- The breach has happened. The evidence is waiting. Can your team uncover the truth before time runs out?
- Register your team and enter the investigation.