Evaluation & Scoring Rubric
This rubric checks whether an incident report uses accurate findings, a clear method, and careful language.
Point Distribution (Max 100 Points)
Correct Analysis Flag
Forensically identifying and submitting the correct simulated flag code matching the incident dataset.
Evidence & Source Quality
Notebook records explicitly specify which official reports were used, record the correct access date, and match observed timeline telemetry.
Confidence Level & Defensive Voice
Assigning lower confidence ratings to ambiguous indicators. Formatting the report to strictly segregate verified facts from inferential leaps.
Scoring Penalty Parameters
Unsupported Over-Claims & Early Attribution
Asserting actor attribution as absolute truth based solely on network proxy overlaps, or drawing definite conclusions from ambiguous diagnostic log entries.
Privacy & Ethical Bounds Violations
Including real personal identifiers, victim details, or leaked database entries in your report notes. The lab runs strictly on synthetic, simulated values.
Investigative Standard
Incident Lab checks how you review an incident. Your score depends on accurate data, clear uncertainty, and respect for legal and privacy limits. Your notes should be clear enough for another person to check.

