Blue Team Assessment Platform

Test Your Cyber
Defense Skills

CyberStrike Arena is a structured assessment platform for SOC, DFIR, and CTI analysts. Real scenarios. Real tools. Measurable results.

Register as Player → Reviewer Portal
3
Departments
4
Roles
8h
Assessment
4
Attempts
Investigation Tools
Real Tools. Real Investigation.

Players use the same tools they'd use in a real SOC, CTI, or DFIR role.

🔍
Kibana SIEM
SOC
Live Elastic/Kibana instance pre-loaded with scenario-specific log data. Players write KQL queries to investigate alerts, hunt threats, and find evidence to answer SOC questions. Auto-login SSO — no separate credentials.
🧠
CTI Workbench
CTI
Custom-built threat intelligence platform with IOC enrichment, MITRE ATT&CK Navigator, threat actor profiles, and scenario-specific intelligence reports. All data is pre-loaded and curated for the scenario.
💻
DFIR Virtual Machine
DFIR
Downloadable OVA image of a pre-compromised Windows system. All forensic artifacts are pre-organized in C:\Evidence\. Tools pre-installed include PECmd, PEStudio, Autoruns, RegRipper, Event Log Explorer, and Volatility 3.
Scoring System
Attempt-Based Scoring

Each question allows up to 4 attempts. Score decreases with each wrong attempt. Question locks on the 5th attempt or when time expires.

100%
Attempt 1
75%
Attempt 2
50%
Attempt 3
25%
Attempt 4
🔒
5th → Lock
Assessment Integrity
Built-in Assessment Integrity

Participants are informed of all monitoring measures in the rules acknowledgment before the assessment begins.

📋
Tab Switch Logging
Every tab switch is logged with timestamp. Players legitimately using tools will show expected patterns.
🔒
One Active Session
Each player can only be logged in on one device. A new login invalidates previous sessions.
🔀
Randomized Question Order
Each player receives questions in a different randomized order, preventing coordination.
⏱️
Answer Timing Analysis
Suspiciously fast answers relative to question difficulty are flagged in the report.
📋
Clipboard Monitoring
Paste events are detected and logged. Copy shortcuts are disabled within the platform.
🏷️
Player Watermark
Player name and ID are embedded in the interface, making screenshots traceable.
Get Started
Ready to Begin?

Register as a player to participate in the next assessment, or contact the Assessment Lead for reviewer access.

Register as Player → View Platform