18–20 Jan 2027 // AI-first CTF
Can you build a trustworthy threat hunting agent under pressure?
One incident. One telemetry lake. Your agent does the digging, your team makes the calls. Flags score points. Evidence earns trust.
Start hunting ▸ Grab your hat28Flags
4IR decisions
60Hours
5Max per team
How it works
Hunt. Prove. Decide.
01 //
Hunt
Point your agent at the lake. The tables are Defender-shaped, the language is KQL. You know the drill.
02 //
Prove
Every flag comes with receipts. Cite the rows. Cross-check a second table. No evidence, no trust.
03 //
Decide
Four incident calls only a human can make. Your agent advises. Your team decides.