Archive The HollowTTeam access
THE HOLLOW / CYBER INCIDENT FILES

Every breach leaves a trace.

Seven case files. Conflicting leads. One response window.

7 attack stagesOne connected incident story
Up to 6 per teamOne shared response each round
Decisions + timeMeasured, explainable scoring

Register your response team

Enter the facilitator’s exercise code.

Must match your signed-in email. New teams require administrator approval before evidence is released.

Each team uses a separate signed-in captain. One captain submits for the entire roster. Up to 30 teams can join the same room.

ARCHIVE / 007 CASE FILES

The case library.
Nothing is incidental.

Seven documented cases, including Trivy (2026), Salesloft Drift and SharePoint ToolShell (2025), and Snowflake customer-account theft (2024). Primary-source timelines and simulated evidence support every exercise.

Your case files

Cases you create or join will appear here.