Haystack

Follow faint signals, separate noise from evidence, and surface what is real. Identify key indicators, scope the intrusion, and remove an active foothold with precision. This focused blue‑team challenge rewards disciplined triage, clear documentation, and decisive action across tools analysts rely on daily.

Blue
20 teams
6 hrs
Intermediate