# Corporate Infiltration Scenario Template

## Overview

**Scenario Type**: Infiltration & Investigation
**Organization Type**: [Infiltrated / Controlled]
**ENTROPY Cell**: [Select appropriate cell]
**Difficulty**: [Beginner / Intermediate / Advanced]
**Estimated Playtime**: 45-75 minutes
**CyBOK Areas**: [List 2-4 primary areas]

## Scenario Premise

[Brief description of the situation, threat, and SAFETYNET's involvement]

**Organization Details:**
- **Company Name**: [Name]
- **Industry**: [Technology / Finance / Healthcare / Consulting / etc.]
- **Size**: [Small (<50 employees) / Medium (50-200) / Large (200+)]
- **Legitimacy**: [Fully legitimate / Front company / Partially compromised]

**ENTROPY Involvement:**
- **Cell**: [Which ENTROPY cell]
- **Primary Villain**: [Name, Tier, Cover Identity]
- **Supporting Villains**: [Names, roles]
- **Operation Type**: [Data exfiltration / Insider threat / Supply chain / etc.]
- **Ultimate Goal**: [What ENTROPY is trying to achieve]

---

## Three-Act Narrative Structure

### Pre-Mission: Briefing

**Location**: SAFETYNET HQ
**Handler**: [Agent 0x99 / Director Netherton / Other]

**Briefing Elements:**
- **The Hook**: [What triggered SAFETYNET involvement?]
- **The Stakes**: [Why does this matter? Who's at risk?]
- **Cover Story**: [What role is player assuming?]
- **Authorization**: [Which protocols allow this operation?]
- **Equipment**: [What tools are provided?]

**Example Briefing Dialogue:**
> **[Handler Name]**: "[Opening that establishes situation]"
>
> **[Handler Name]**: "[Mission parameters and objectives]"
>
> **Director Netherton**: "Per Section [X], Paragraph [Y]: [Bureaucratic authorization with humor]"

---

### Act 1: Setup & Entry (15-20 minutes)

**Objectives:**
- ☐ Establish presence and cover
- ☐ Initial reconnaissance (locate key areas)
- ☐ Meet initial NPCs
- ☐ Discover first piece of evidence
- ☐ Encounter first locked areas
- ★ Optional: Find first LORE fragment

**Starting Location: Reception / Lobby**

**NPCs:**
- **Receptionist**: [Name, personality, innocent/compromised, trust level]
- **Security Guard**: [Name, personality, behavior]
- **[Other NPC]**: [Details]

**Player Entry Options:**
1. **Social Engineering**: [How player can talk their way in]
2. **Show Credentials**: [Official cover story approach]
3. **Technical Bypass**: [If applicable, security system weakness]
4. **Stealth Entry**: [If controlled corp, alternative entry]

**Initial Challenges:**
- [Locked door/area #1 - visible but inaccessible]
- [Locked door/area #2 - visible but inaccessible]
- [Locked door/area #3 - visible but inaccessible]
- [Simple puzzle - tutorial level]

**Environmental Storytelling:**
- [Notice board reveals: ...]
- [Calendar shows: ...]
- [Photo reveals: ...]
- [Document hints at: ...]

**First Discovery:**
[What suspicious element makes player realize something is wrong?]

**Act 1 Branching:**
- **If social engineering succeeds**: [NPC becomes ally]
- **If player shows credentials**: [Taken seriously, watched closely]
- **If player is aggressive**: [NPCs become suspicious]

---

### Act 2: Investigation & Revelation (20-30 minutes)

**Phase 1: Investigation (10-15 minutes)**

**Accessible Rooms:**
1. **[Room Name]** (e.g., General Office Area)
   - **NPCs**: [Who's here, innocent/compromised]
   - **Puzzles**: [What challenges exist]
   - **Evidence**: [What clues are discoverable]
   - **Backtracking Setup**: [What locked area can now be accessed]

2. **[Room Name]** (e.g., IT Office)
   - **NPCs**: [Details]
   - **Puzzles**: [Details]
   - **Tools Acquired**: [Bluetooth scanner / Fingerprint kit / etc.]
   - **Intel Gained**: [Information that unlocks previous areas]

3. **[Room Name]** (e.g., Break Room / Conference Room)
   - **NPCs**: [Details]
   - **Environmental Clues**: [Details]
   - **Backtracking Information**: [PIN codes, passwords, etc.]

**Required Backtracking Puzzle Chains:**

**Chain 1: [Name of Puzzle]**
- **Act 1 Setup**: Player sees [locked area]
- **Act 2 Discovery**: Player finds [key/code/tool] in [location]
- **Backtrack**: Player returns to [original area] to [unlock/solve]
- **Reward**: [What's gained]

**Chain 2: [Name of Puzzle]**
- **Multiple Locations**: Information scattered across [list rooms]
- **Synthesis Required**: Player must combine [detail 1] + [detail 2] + [detail 3]
- **Solution**: [How pieces fit together]
- **Backtrack**: [Where to apply solution]

**Phase 2: The Revelation (Mid-Act 2)**

**Plot Twist Options:**
- [ ] Helpful NPC is actually ENTROPY
- [ ] Mission parameters are wrong (bigger threat than expected)
- [ ] Company is complicit / entirely controlled
- [ ] Previous agent worked this case (went missing)
- [ ] Personal stakes revealed

**Chosen Twist**: [Which twist for this scenario]

**How It's Revealed:**
[Describe how player discovers the truth]

**Phase 3: Discovery of Evil Plans (Optional)**

**ENTROPY Operation Details:**
- **Attack Type**: [Infrastructure / Data / Supply Chain / Disinformation / etc.]
- **Timeline**: [When will it happen]
- **Attack Vector**: [How they plan to execute]
- **Targets**: [Who/what is at risk]
- **Evidence Location**: [Where player discovers the plan]

**Phase 4: Working to Stop the Plans (Optional)**

**Disruption Challenges:**
- **Technical**: [Disable systems, patch vulnerabilities, decrypt code]
- **Physical**: [Access server rooms, disable hardware]
- **Time Pressure**: [Countdown elements]

**Major Player Choices (3-5 Required):**

**Choice 1: [Name]** (Early Act 2)
- **Situation**: [Describe dilemma]
- **Option A**: [Choice] - [Consequence]
- **Option B**: [Choice] - [Consequence]
- **Option C**: [Choice] - [Consequence]
- **Impact**: [How this affects later gameplay]

**Choice 2: [Name]** (Mid Act 2)
- **Situation**: [Describe dilemma]
- **Options**: [List with consequences]
- **Impact**: [Effects on narrative]

**Choice 3: [Name]** (After Plan Discovery)
- **Situation**: [Describe dilemma]
- **Options**: [List with consequences]
- **Impact**: [Effects on ending]

**LORE Fragment Placement (3-5 fragments):**

1. **[Location]**: [Fragment type] - "[Brief description of content]"
2. **[Location]**: [Fragment type] - "[Brief description of content]"
3. **[Location]**: [Fragment type] - "[Brief description of content]"
4. **[Location]**: [Fragment type] - "[Brief description of content]"
5. **[Location]**: [Fragment type] - "[Brief description of content]"

**Act 2 Objectives:**
- ☐ Access secured areas (requires backtracking)
- ☐ Identify ENTROPY involvement
- ☐ Decrypt communications
- ☐ Discover [specific operation details]
- ☐ Gather evidence of [villain's] involvement
- ☐ Make 3-5 major narrative choices
- ☐ Discover 3-5 LORE fragments
- ★ Find all LORE fragments
- ★ Identify insider before confrontation
- ★ Maintain cover throughout

---

### Act 3: Confrontation & Resolution (10-15 minutes)

**Final Location**: [Executive Office / Conference Room / Server Room / etc.]

**Final Challenges:**
- **Security Challenge**: [Multi-stage lock / Time-pressure puzzle / etc.]
- **Evidence Cache**: [Where final proof is stored, how to access]
- **Villain Confrontation**: [Where and how confrontation occurs]

**The Confrontation:**

**Villain Identity**: [Name, cover identity revealed as actual role]

**Villain Monologue Options:**
- [ ] Philosophical (entropy ideology)
- [ ] Pragmatic (it's just business)
- [ ] Desperate (forced by circumstance)
- [ ] True Believer (cult-like devotion)
- [ ] Taunting (mocking SAFETYNET)
- [ ] Regretful (genuine remorse)

**Player Options:**

**Option A: Practical Exploitation**
> "[Dialogue forcing cooperation]"
- Mechanics: [How this works]
- Consequence: [Debrief response]

**Option B: By the Book Arrest**
> "[Formal arrest dialogue]"
- Mechanics: [How this works]
- Consequence: [Debrief response]

**Option C: Combat**
> "[Aggressive confrontation]"
- Mechanics: [Combat encounter]
- Consequence: [Debrief response]

**Option D: Recruitment/Flip**
> "[Offer to become double agent]"
- Requirements: [What evidence/trust needed]
- Success: [Ongoing intelligence]
- Failure: [Leads to combat/arrest]
- Consequence: [Debrief response]

**Option E: Interrogation**
> "[Extract information before resolution]"
- Information Gained: [Additional cells, methods, targets]
- Consequence: [Debrief response]

**Option F: Understanding**
> "[Ask why they did this]"
- Revelation: [Personal/philosophical motivation]
- Consequence: [Affects player perspective, debrief]

**Mission Completion:**
- ✓ Evidence secured
- ✓ ENTROPY agent dealt with
- ✓ Threat neutralized
- ✓ Company protected (level varies)

**Optional Objectives (choice-dependent):**
- ★ Recruited double agent
- ★ Identified additional ENTROPY contacts
- ★ Protected all innocent employees
- ★ Completed without alerts
- ★ Found all LORE fragments

---

### Post-Mission: Debrief Variations

**Ending A: By the Book**
> **[Handler]**: "[Praise for professional conduct]"
>
> **Director Netherton**: "Per Section [X]: [Bureaucratic approval]"
>
> **[Handler]**: "[Intelligence gained, specialization update]"

**Ending B: Pragmatic Victory**
> **[Handler]**: "[Acknowledgment of methods, mixed feelings]"
>
> **Director Netherton**: "Per Protocol [X]: [Grudging acceptance]"
>
> **[Handler]**: "[Results focus, concern about ethics]"

**Ending C: Aggressive Resolution**
> **[Handler]**: "[Acknowledges effectiveness, paperwork concerns]"
>
> **Director Netherton**: "[Authorization validation, proportionality questions]"
>
> **[Handler]**: "[Collateral damage assessment]"

**Ending D: Intelligence Victory**
> **[Handler]**: "[Impressed by asset recruitment]"
>
> **Director Netherton**: "[Asset management responsibility]"
>
> **[Handler]**: "[Ongoing intelligence operation details]"

**Ending E: Thorough Investigation**
> **[Handler]**: "[Praise for patience and intelligence gathering]"
>
> **Director Netherton**: "[Recognition of thoroughness]"
>
> **[Handler]**: "[Follow-up operations enabled]"

**Ending F: Mixed Outcome**
> **[Handler]**: "[Success with complications]"
>
> **Director Netherton**: "[Results vs. methods assessment]"
>
> **[Handler]**: "[Lessons learned focus]"

**Universal Closing (all endings):**
> **[Handler]**: "One more thing. [Connection to larger ENTROPY network, teaser for future scenarios]"

---

## Location Breakdown

### Reception / Lobby
**Function**: Entry point, initial NPC interactions, tutorial puzzles
**Size**: Medium
**NPCs**: Receptionist, Security Guard
**Connections**: [North: General Office] [East: Break Room] [West: Secured door]
**Locked Areas Visible**: [List 2-3 locked doors players can see but not access]
**Puzzles**:
- Simple: [Basic encoding, social engineering]
**Evidence**:
- Visitor logs (optional investigation)
- Company directory
- Notice board with [clue type]

### General Office Area
**Function**: Multi-NPC investigation, evidence gathering
**Size**: Large
**NPCs**: [3-5 office workers, mostly innocent]
**Connections**: [Cardinal directions to other rooms]
**Puzzles**:
- [Encrypted message requiring CyberChef]
- [Locked desk requiring key]
**Evidence**:
- Employee concerns about [villain]
- Email hints
- Personal information useful for passwords

### IT Office
**Function**: Tool acquisition, friendly NPC ally, technical information
**Size**: Small-Medium
**NPCs**: IT Manager (helpful, innocent)
**Connections**: [Cardinal directions]
**Items Acquired**:
- Bluetooth scanner
- Partial passwords/PINs
- VM access
**Evidence**:
- Server access logs
- Network diagrams
- Equipment borrowing records

### Break Room / Common Area
**Function**: Casual intel gathering, password discovery
**Size**: Small
**NPCs**: [2-3 employees, innocent]
**Connections**: [Cardinal directions]
**Environmental Clues**:
- Notice board with wifi password
- Overheard conversations
- Calendar with important dates
- Coffee machine sticky notes

### Executive Office
**Function**: High-security challenge, major evidence
**Size**: Medium
**NPCs**: [Executive - may be present or away]
**Connections**: [Usually off main path]
**Security**:
- Locked door (keycard required)
- Password-protected computer
- Safe with biometric lock
**Evidence**:
- Encrypted files
- Financial records
- Communications with ENTROPY

### Server Room
**Function**: Technical challenge, critical evidence
**Size**: Small-Medium
**NPCs**: None (restricted access)
**Connections**: [Usually limited, secured]
**Security**:
- Admin keycard required
- Multiple authentication
**Challenges**:
- VM exploitation
- Log analysis
- Network investigation
**Evidence**:
- Complete logs showing attack
- Encrypted ENTROPY communications
- Backup data

### Security Office
**Function**: Villain's domain, confrontation location
**Size**: Small-Medium
**NPCs**: [Villain - Head of Security or similar]
**Connections**: [Strategic location]
**Security**:
- PIN code lock
- Biometric systems
- Multiple layers
**Evidence**:
- Evidence vault
- Dark web access logs
- Communications with ENTROPY leadership

### Conference Room
**Function**: Final puzzle, evidence synthesis
**Size**: Medium
**NPCs**: Variable
**Connections**: [Central or secured location]
**Puzzles**:
- Locked briefcase
- Final encrypted files
**Evidence**:
- Complete operation details
- ENTROPY network maps
- Attack timelines

---

## Key Rooms and Puzzles

### Critical Path Puzzles

**Puzzle 1: [Name]**
- **Type**: [Key lock / PIN / Password / Encryption / etc.]
- **Location**: [Where encountered]
- **Solution Components**:
  - [Component 1 found in: location]
  - [Component 2 found in: location]
  - [Component 3 found in: location]
- **Backtracking Required**: [Yes/No, where to where]
- **Educational Focus**: [CyBOK area]
- **Difficulty**: [Easy / Medium / Hard]

**Puzzle 2: [Name]**
- **Type**: [Details]
- **Location**: [Details]
- **Solution**: [How to solve]
- **Educational Focus**: [CyBOK area]

**Puzzle 3: [Name]**
- [Continue pattern]

### Optional Puzzles (for LORE/Bonus objectives)

**Bonus Puzzle 1: [Name]**
- **Location**: [Hidden or off main path]
- **Reward**: [LORE fragment or bonus intel]
- **Difficulty**: [Higher than critical path]

---

## NPC Archetypes

### Innocent Employees (Majority in Infiltrated Orgs)

**[NPC Name 1]** - Receptionist
- **Personality**: Helpful, professional
- **Role**: Gatekeeper, initial trust builder
- **Knowledge**: Company layout, employee names, basic operations
- **Trust Triggers**: Professional behavior, credentials, friendly conversation
- **Dialogue Branches**: [Helpful path / Suspicious path / Professional path]

**[NPC Name 2]** - IT Manager
- **Personality**: Technical, cooperative
- **Role**: Technical ally, tool provider
- **Knowledge**: System architecture, security protocols, suspicious activity
- **Trust Level**: Starts medium-high (legitimate audit)
- **Provides**: Equipment, passwords, technical insights

**[NPC Name 3]** - Office Worker
- **Personality**: Observant, concerned
- **Role**: Intel source about villain
- **Knowledge**: Behavioral changes, suspicious activities
- **Dialogue**: Casual observations that reveal clues

### ENTROPY Agents

**[Primary Villain Name]** - [Cover Identity]
- **Real Identity**: ENTROPY [Tier 2/3] [Cell name] operative
- **Cover**: [Job title/role]
- **Personality Type**: [Philosophical / Pragmatic / Desperate / etc.]
- **Motivation**: [Why they're doing this]
- **Red Flags**: [Suspicious behaviors player can notice]
- **Confrontation Style**: [How they react when caught]
- **Combat Difficulty**: [If combat occurs]

**[Supporting Villain]** - [Cover Identity]
- **Real Identity**: [Details]
- **Role in Operation**: [Support function]
- **Revelation**: [How player discovers their involvement]

### Suspicious But Innocent NPCs (Red Herrings)

**[NPC Name]** - [Role]
- **Suspicious Because**: [Having affair / Embezzling / Interviewing elsewhere / etc.]
- **Actually**: Completely unrelated to ENTROPY
- **Purpose**: Add complexity, reward thorough investigation

---

## Evidence Trail

### Primary Evidence (Required for mission success)

1. **[Evidence Item 1]**
   - **Type**: [Document / Email / Log / Encrypted file]
   - **Location**: [Room and container]
   - **Access Requirements**: [What's needed to obtain]
   - **Reveals**: [What intelligence]
   - **Ties to**: [Which villain/plot element]

2. **[Evidence Item 2]**
   - [Continue pattern]

3. **[Evidence Item 3]**
   - [Continue pattern]

### Secondary Evidence (Bonus objectives, character background)

1. **[Bonus Evidence 1]**
   - **Location**: [Hidden or challenging to access]
   - **Reveals**: [Additional context or ENTROPY network info]
   - **Required for**: [Which ending or bonus objective]

---

## Educational Focus Options

Choose 2-4 CyBOK areas to emphasize:

### Applied Cryptography
- **Encoding**: Base64, Hex, URL encoding
- **Classical Ciphers**: Caesar, Vigenère
- **Symmetric**: AES-128/256, various modes
- **Hashing**: MD5, SHA-256 verification
- **Asymmetric**: RSA operations (advanced)

**Implementation**:
- Encrypted ENTROPY communications require decryption
- Password derivation from contextual information
- Hash verification of evidence integrity

### Human Factors (Social Engineering)
- **Trust Building**: Establishing rapport with NPCs
- **Manipulation**: Getting information from reluctant sources
- **Pretexting**: Maintaining cover story
- **Authority**: Using credentials effectively

**Implementation**:
- Multiple NPCs with varying trust levels
- Different approaches yield different results
- Social engineering can shortcut technical challenges

### Security Operations & Incident Management
- **Log Analysis**: Reviewing server/access logs
- **Forensics**: Examining systems for intrusion evidence
- **Incident Response**: Identifying and stopping attacks
- **Evidence Collection**: Proper documentation

**Implementation**:
- VM challenges with log analysis
- Timeline reconstruction from multiple sources
- Active attack that must be stopped

### Network Security
- **Network Mapping**: Understanding infrastructure
- **Traffic Analysis**: Identifying suspicious communications
- **Vulnerability Assessment**: Finding security weaknesses
- **Access Control**: Understanding authentication systems

**Implementation**:
- Network diagrams to understand
- Bluetooth scanning for device proximity
- Bypassing layered security appropriately

---

## Variations

### Difficulty Scaling

**Beginner Version:**
- More explicit hints
- Simpler encryption (Base64, simple substitution)
- Fewer backtracking requirements
- Obvious clues
- Helpful NPCs provide direct assistance

**Intermediate Version** (Default):
- Contextual hints
- AES encryption with discoverable keys
- Multiple backtracking puzzles
- Evidence correlation required
- NPCs provide hints but not solutions

**Advanced Version:**
- Minimal hints
- RSA or complex multi-stage encryption
- Extensive backtracking and puzzle chains
- Subtle clues requiring deduction
- NPCs may mislead or test player

### Organizational Variations

**If Infiltrated Organization:**
- Most NPCs helpful and innocent
- 1-3 NPCs are ENTROPY
- Detective/investigation focus
- Social engineering encouraged
- Lower combat likelihood
- Protecting innocent employees matters

**If Controlled Corporation:**
- Most NPCs hostile or coerced
- Few truly helpful NPCs
- Stealth/evasion focus
- Social engineering high-risk
- Higher combat likelihood
- Shutting down entire operation

### Alternative Villain Motivations

**Variation A: Blackmailed Villain**
- ENTROPY has leverage (family, debt, secrets)
- More sympathetic
- Recruitment path easier
- Debrief focuses on ENTROPY's methods

**Variation B: True Believer**
- Ideological commitment
- Less sympathetic
- Recruitment path harder/impossible
- More information about ENTROPY philosophy

**Variation C: Mercenary**
- Just doing it for money
- Pragmatic, no loyalty
- Recruitment possible with better offer
- Focus on Zero Day Syndicate marketplace

---

## Implementation Notes

### JSON Structure Considerations
- Room graph with cardinal direction connections
- NPC dialogue trees with state tracking
- Evidence items with discovery triggers
- Objective completion conditions
- Branching narrative logic

### Playtesting Focus
- Are backtracking puzzles clear but not obvious?
- Do player choices meaningfully affect outcomes?
- Is educational content integrated naturally?
- Are difficulty spikes appropriate?
- Do innocent NPCs feel genuinely innocent?
- Is villain revelation satisfying?

### Common Pitfalls to Avoid
- Don't make puzzle solutions random/arbitrary
- Don't require pixel-hunting for critical items
- Don't punish thorough investigation
- Don't make all NPCs suspicious (reduces impact)
- Don't forget to tie evidence to narrative
- Don't make backtracking tedious (keep distances reasonable)

---

*This template provides the structure for corporate infiltration scenarios. Adapt the elements to fit your specific narrative, ENTROPY cell, and educational objectives. Remember: story and puzzles must support each other.*
