// CONTEST

Forensic Files: A Blue Team Challenge

A hands-on blue-team DFIR challenge: investigate artifacts, triage incidents, and respond to threats in a live environment.

Forensic Files: A Blue Team Challenge illustration

Step into the role of a real-world defender in Forensic Files: A Blue Team Challenge, a hands-on DFIR experience where you won’t just answer questions, you’ll investigate incidents. This revamped challenge drops you into a live, virtualized environment where you’ll analyze forensic artifacts, triage systems, and respond to simulated threats just like a blue team operator in the field. Whether you’re digging through OS artifacts or uncovering attacker activity, every task is designed to sharpen the skills that matter most in modern incident response.

Teams up to 4Entry to intermediateOne dayReal-time scoreboard

Built for entry-to-intermediate players, this one-day, team-based competition (up to 4 players) blends the accessibility of a CTF with the realism of live analysis. Compete on a real-time scoreboard, collaborate with your team, and test your ability to think critically under pressure. If you’re looking to level up your DFIR skills, or take your first step into the blue team world, this is where theory meets practice.

Forensic Files runs with the Eiffel65 Blue Team.

Security Briefing

Join the mission log

Occasional emails with training announcements, CFP windows, and what's launching at SAINTCON. No spam, no selling your address. Ever.

By subscribing you agree to the Privacy Policy.