ThePuzzleLabs

Deduction

Share

Play Medium Deduction — ThePuzzleLabs

Try this Medium Deduction puzzle on ThePuzzleLabs.

EasyMediumHardExpertEinstein ⚡
00:00

The Case

A company's backup server was wiped between 10 PM and 10:30 PM. The wipe required physical access to the server room and admin-level credentials. Four employees were still in the building: Aisha (engineering), Derek (security), Tomoko (system admin), and Raj (sales). Case file MEDIUM-001.

Who wiped the server?

Evidence (6)

#1Only Aisha and Tomoko have admin-level server credentials.
#2Aisha was on a recorded video call with a client from 9:45 PM to 10:20 PM. Her screen was shared the entire time.
#3Derek was stationed at the lobby front desk. Lobby camera footage confirms he didn't leave until 10:35 PM.
#4Raj claims he was in the parking garage, but the garage key-card log shows no entry between 9 PM and 11 PM.
#5Tomoko says she was in the third-floor break room. The break room is next door to the server room.
#6The server room door requires a key card. Only admin-credentialed employees have server room access.

Suspects

Clues

Reveal the Solution?

This will show the answer and full deduction chain. The puzzle will be marked as "solved with reveal."

About medium deduction cases

Four suspects now. The clue count goes up, but so does the noise. Medium cases include evidence that looks damning but leads nowhere — red herrings designed to pull you toward the wrong suspect. You need to check your reasoning against all the evidence, not just the clues that support your initial hunch.

Elimination becomes the primary tool. Instead of asking "who looks guilty?", ask "who definitely didn't do it?" Cross off suspects with solid alibis. When you're down to two, look for the single piece of evidence that separates them. It's always there.

The hard level introduces five suspects and evidence that requires chaining multiple clues. Get comfortable with elimination first.