Welcome back, John

Case NIGHTJAR-2025-0417 · Operation Nightjar active

⇄

Intel Sync: KODEX ↔ NIGHTJAR

File Discord legal process to unlock suspect unmasking in Nightjar.

▤

Total Requests

0

↑ 0 this case

◷

In Progress

0

awaiting response

✓

Unmasked

0

suspects identified

Requests

No requests yet. Click New Request to begin.

No request selected

Select a request to view details.

◉ OPERATION NIGHTJAR — SERVER HUB

Select a Discord server to investigate. Clear servers by identifying the ringleader.

◉ SECURED 0 / 5

🔓 UNMASKED 0

⚙

Procedural Challenge Generator

Synthesize new servers with randomized suspects and ringleaders.

◉ OPERATION NIGHTJAR

SERVER: —

SUSPECTS: 0

EVIDENCE: 0

UNMASKED: 0

TIME: —

← Server Hub

◉ CHANNELS

◉ SUSPECTS

No suspects identified

# general IDLE

⚠ COUNTER-TRACE DETECTED 0%

◉ VOICE EMPTY

No one in voice

— is typing

◉ EVIDENCE LOG

Click clues to log them

Agency Profile

Manage your operative identity and credentials

Documents

Case files, evidence exports, and legal templates

▦

Case Files

0

from cleared servers

⚖

Legal Requests

0

filed with providers

▤

Evidence Items

0

logged across all servers

Case Files

Legal Requests

Evidence Log

Templates

Cleared Servers

0 files

No cleared servers yet. Arrest a ringleader in Nightjar to generate a case file.

Filed Legal Requests

0 files

No requests filed yet. Use New Request to begin.

Evidence Log

No evidence logged yet. Open a Nightjar server and click clues.

⚖

Discord Legal Process Subpoena

Standard 18 U.S.C. § 2703(d) order template for Discord subscriber records.

◷

Data Preservation Letter

90-day preservation request under 18 U.S.C. § 2703(f).

!

Emergency Disclosure Form ED-7

Life-threatening emergency disclosure authorization form.

▤

Content Takedown Request

Platform Trust & Safety escalation template.

◉

Arrest Warrant Affidavit

Federal arrest warrant affidavit template for cybercrime investigations.

☎

Wiretap Application (Title III)

Title III wiretap application template with probable cause affidavit.

Contacts

Agency directory and liaison officers

◈

Discord Trust & Safety

Legal process intake: [email protected] · Response window: 5–10 business days

◈

Signal Legal

Subpoena intake · Response window: 7–14 days · No data retained by default

◈

Telegram Compliance

Limited cooperation · Requires MLAT for non-UAE jurisdictions

◈

Legal Attaché — EU

The Hague · Handles cross-border MLAT requests

◈

Legal Attaché — APAC

Singapore · Handles APAC MLAT and emergency disclosures

◈

Emergency Duty Officer

24/7 emergency disclosure authorization · Use only for life-threatening cases

Messages

Secure provider correspondence and DM intercepts

Message Threads

0 threads

No messages yet. Provider responses and DM intercepts appear here.

Help & Support

Operator manual, tutorials, and challenge walkthroughs

Quick Start

How to Win

⚠ Counter-Trace

Full Workflow

Challenge Walkthroughs

Commands

Scoring & Strategy

FAQ

1

Open a Nightjar server

Click NIGHTJAR in the sidebar. You'll see the Server Hub. Start with SCRIPT KIDDIES — the easiest server to learn on.

2

Watch the chat scroll in

Messages arrive automatically. Suspects appear in the left sidebar as they post. Watch who gives orders and who takes them.

3

Click the highlighted clues

Words like 45.133.1.88 are clickable. Each click logs an evidence item in the right panel.

4

Switch channels

Click any channel in the left sidebar or type switch #drops in the command bar.

5

File a KODEX request

Click New Request in the sidebar. Choose Discord + Legal Process, enter a suspect's handle as the subject, submit. It goes to Pending Review — meet the Nightjar requirements to trigger a provider response.

6

Meet the requirements

Open the request detail (Dashboard → click request). You'll see "Nightjar Requirements." For Legal Process, log at least 1 evidence item against that suspect. Then the provider responds.

7

Arrest the ringleader

Once unmasked, right-click them in Nightjar or type arrest <handle>. If you got the right person — the ringleader — the server is cleared.

8

Check the rest of the portal

Click Documents for case files, Messages for DM intercepts, and Agency Profile to change your codename and affiliation.

0 of 8 steps acknowledged

◉ Reading the Header Stats

Stat	Means	How to increase
SUSPECTS	Handles who have spoken in this server.	Wait for chat to play — usually 5–7 appear.
EVIDENCE	Items you've logged by clicking clues or audio.	Click every highlighted word. Click audio → Log as Evidence.
UNMASKED	Suspects whose real data you've revealed via KODEX.	File Discord Legal Process. Meet requirements. IP appears in green.
TIME	Countdown. Zero = case fails.	Move efficiently. File requests early.

◉ The 6-Step Completion Checklist

Let the chat finish playing. Don't exit until all channels have stopped producing messages.
Log every clue. Click every highlighted term, in every channel.
Log every audio attachment. Click ♪ cards → Play → Log as Evidence.
File KODEX requests. New Request → Discord → Legal Process. Subject = suspect handle.
Unmask the ringleader. Once their request completes, their IP shows in green.
Arrest the ringleader. Right-click → Submit arrest warrant, or arrest <handle>.

◉ What Fails a Case

Arresting the wrong suspect. Ringleader escapes; case fails.
Timer hits zero. Suspects scatter before you serve the warrant.
A counter-trace hits 100%. Suspects sever your connection (see the Counter-Trace tab).

◉ Procedural Challenges

The Server Hub has a ⚙ Procedural Challenge Generator. Generate unlimited new servers with randomized suspects, ringleaders, evidence, audio, and DMs. Generated servers are marked with a dashed purple border.

◉ How Counter-Traces Work

If you spend too long in a server (usually when the timer drops below 3 minutes), the suspects may detect your monitoring tools. A red COUNTER-TRACE bar will appear at the top of the chat feed.

You have roughly 5 seconds to sever the connection before the bar reaches 100%. If it hits 100%, the server deploys a kill-switch, you are kicked out, and the case fails immediately.

◉ How to Survive a Trace

To stop the trace, you must force the platform to kill the connection from their end. You do this by filing a Content Takedown request in KODEX.

Immediately switch to the Dashboard.
Click New Request.
Select Discord and Content Takedown.
Enter the handle of any suspect you've already seen in the server.
Submit the request.
Fulfill the requirement: Mark the suspect as priority in Nightjar (right-click them → ★ Set priority).

Once the provider processes the takedown, the server connection is severed safely, the trace meter turns green, and you can resume your investigation.

◈

1. Open Server

Hub → pick a server

→

◉

2. Monitor Chat

Click clues → evidence

→

⚖

3. File Request

Discord Legal Process

→

⏳

4. Meet Reqs

Log evidence on subject

→

🔓

5. Unmask

Provider returns IP

→

⚔

6. Arrest

Ringleader → cleared

◉ Terminal Commands

Command	Does
`switch <channel>`	View another channel
`channels`	List channels with unread counts
`inspect <handle>`	Show suspect dossier
`evidence`	List logged evidence
`ips`	Sweep suspect IPs
`transcribe`	List audio intercepts
`voice`	Show active voice channels
`dms`	Open DM panel
`arrest <handle>`	Submit arrest warrant
`hub`	Return to Server Hub
`hint`	Reveal scored hint
`time`	Show time remaining
`export`	Download case file
`help`	Print command list

◉ Right-Click Menu

Right-click any suspect for: inspect, timeline, cross-reference, priority, surveillance, isolate, pin, wiretap (500 pts), burn identity (1000 pts), file KODEX request, open DM, or arrest.

◉ Score Formula

score = (base + time + evidence + DMs + unmask) × difficulty − hint penalty

Component	Value
Base (victory)	5,000
Base (defeat)	1,000
Time bonus	1 pt per second remaining (victory only)
Evidence bonus	+50 each
DM bonus	+200 each
Unmask bonus	+300 each
Difficulty multiplier	1× / 2× / 3–4× / 5×
Hint penalty	−500 × hint cost

◉ Strategic Tips

Don't hint early. Costs 4,000–7,500 pts on hard servers.
Unmask before arrest. +300 pts per unmask.
Wiretap early is worth it. 500 pts for a suspect's next DM.
Burn selectively. 1,000 pts is steep — use on a likely ringleader.
Loudest is often a decoy. In hard servers, watch who defers.

◉ Why is my request stuck on "Pending Review"?

You haven't met all the Nightjar requirements shown in the request detail. Complete each requirement to trigger a provider response.

◉ Why does my IP show as [ENCRYPTED]?

Because that suspect hasn't been unmasked via KODEX yet. File a Discord Legal Process request for their handle.

◉ How do I know who the ringleader is?

Watch for authority cues: who sets rules, who takes the largest cut, who others defer to. Type hint for a description of the ringleader's pattern.

◉ The red trace bar is filling up! What do I do?

Go to the KODEX Dashboard immediately and file a Content Takedown request for the server. Mark the suspect as priority in Nightjar to fulfill the requirement. This severs the trace.

◉ What are Geofence and Pen Register requests?

Geofence: Requires you to unmask 2 suspects in the same server. Pen Register: Requires 3 evidence items total. Both are high-level warrants that yield massive intel bonuses.

◉ What happens if I arrest the wrong suspect?

The case fails. The real ringleader escapes. Retry from the hub, or move on.

CASE CLOSED

CASE CLOSED