Cover6 IR Challenge

Work a multi-stage intrusion in Splunk on your own, on a 72-hour clock. You answer 60 questions that only your own incident data can answer, write an incident report with two detections and an after-action review, and defend your work in a 30-minute written defense.

Your incident is one of 12 seeded incidents. Your work is scored against a published rubric, and passing is the Cover6 checkpoint that says You may proceed. Anyone can take it. Incident Response is the natural preparation.

Aligned with DoD 8140 work role 531 (Cyber Defense Incident Responder). No job, interview or exam-pass promises.