Root Cause

Somebody is hacking into a network and it's your job to find out who, how, and what they're about to do next.

Root Cause is a solo investigation thriller built around one feeling: the moment a mess of logs and false leads suddenly clicks into a story that makes sense. You're not clearing rooms or managing a base. You're correlating. Building a case out of evidence that doesn't want to cooperate, and staking your reputation on what you think it means.

The hook

You work the night shift, alone, from your apartment. An alert opens. Somewhere in your customer's network an attacker is already moving, and their next step, encrypt something, steal something, jump to another machine, is on a countdown you can't see, but you can sense. Every question you ask costs you time off that countdown. Every wrong guess buys them room to work.

Why it stays interesting

Real intrusions don't hand you a smoking gun. They hand you a process that looks almost normal, an account that logged in via odd methods, a file sitting somewhere it shouldn't be. You've got a few tools and no hand-holding: figure out what each piece of evidence actually means, pin it into the story in the right order, and make the call, contain it, escalate it, or decide it's nothing at all. Sometimes it really is nothing, and turning a quiet night into a crisis is its own kind of stress.

Why it sticks with you

Get the story wrong and it follows you. The threat actor you misjudged shows back up wearing a different name tag.

What it isn't

No combat. No stealth. No twitch reflexes. If you've ever wanted to get a sense of what digital forensics and incident response is all about then jump on in -- minus the pager and the burnout.

You're the only one on shift tonight. Good luck.