Rules of Engagement
Welcome, Analysts. This is your proving ground. Below are the core rules of the game.
🧑🤝🧑 Team Composition
- Each team is made up of max 3 participants.
- Teams must include a mix of Threat Analyst levels to encourage mentorship and skill diversity.
- To be eligible for final placement, all members must have contributed — no lone wolf wins.
☠️ Code of Conduct
- Maintain a positive and respectful attitude towards other participants.
- Encourage a spirit of friendly competition and collaboration.
- Report any instances of inappropriate behaviour promptly to event organizers.
- Operate ethically. All challenges are self-contained.
- One analyst, one account. No flag sharing.
- Stay in bounds. Ask if you're unsure of scope.
- Do not reference or use real-world data. This includes customer names, production logs, or internal intel.
- Confidentiality and professionalism are paramount.
🔢 Scoring
- Points based on difficulty.
- In a tie situation, the first to score wins.
🛡️ Organisers Authority
- Event organizers have the final say in interpreting and enforcing the rules.
- Follow their instructions promptly.
- Organizers reserve the right to disqualify participants engaging in unfair practices.
- Organizers are not eligible to compete in the CTF but are welcome to participate.
- Organizers are not allowed to share answers to challenges.
“Train like you fight. Hunt like you mean it.”
— Sophos MDR