Incident Response · Card Game
Backdoors & BreachesScenario Generator
Draw your hand from the full deck — Black Hills core v3.1 plus the glueckkanja AddOn — one card from each of the four attack phases. The CSOC Incident Master spins them into a playable incident: story, attack chain, and detection tips included.
Built by the analysts who handle 120,000+ security incidents a month.
Initial Compromise
1How the attacker first gets in.
Pivot & Escalate
2How the attacker spreads and gains power.
Persistence
3How the attacker keeps a foothold.
C2 & Exfil
4How the attacker controls and steals.
0/4 cards drawn