Elevate your DFIR skills with our exciting CTF competition! Investigate real-world intrusion scenarios and compete with other security professionals.
Loading CTF details...
Everything you need to know about our Capture The Flag competition
Each CTF event lasts 4 hours, providing ample time to investigate real-world intrusion scenarios and answer challenging questions.
Choose between Splunk and Elastic for your SIEM tool, allowing you to work with the platform you're most comfortable with.
Join our DFIR Labs CTF Discord Server for support, real-time updates, and to connect with other participants.
Receive access to a detailed intrusion case 1 hour before the start, including network and endpoint logs, Sigma and YARA hits.
Complete over 20 questions within the 4-hour timeframe, ranging from beginner to expert levels to test your DFIR knowledge.
Top 3 players receive discounts on swag and recognition on the CTF winners page. Top 5 players can join The DFIR Report as volunteer analysts!
Follow these steps to participate in our CTF competition
Purchase your CTF ticket for $9.99 and receive your CTF platform credentials via email.
One hour before the CTF starts, you'll receive lab access credentials with URLs for both resources and SIEM.
When the CTF starts, use both platforms to investigate the case and solve challenges based on real-world scenarios.
Use the CTF Platform to submit your answers to over 20 questions based on your findings.
Top performers will be notified via email after the event concludes with details about prizes and opportunities.
Watch our walkthrough video to get a better understanding of the CTF experience
Join our next CTF event and put your digital forensics knowledge to the test in a real-world intrusion scenario.
Register for the Next CTF