Mercer followed as I climbed the ridge, but he stopped asking where we were going. Below us, Raven Rock had stopped looking like a training installation. Vehicles were moving without formation, medics were being called toward Bravo Three, and every radio channel was filling with people trying to separate real orders from exercise traffic.
That confusion was exactly what somebody had built.
I kept moving north.
The strange part was that Colonel Briggs had already been warned about me once.
At 6:50 that morning, exactly forty minutes after he shoved me out of his briefing room, Major General Helena Voss had called the command net herself. Two stars, regional exercise authority, no ambiguity.
She told Briggs that if I identified an authenticated network compromise, my investigative authority superseded his control of Iron Summit until the threat was contained.
In simpler language, the master sergeant he had thrown out of his operations room could stop his exercise.
Briggs had heard her.
He had also heard Captain Grant quietly explain afterward that my mandate concerned technical evidence, not tactical command decisions.
Briggs chose the interpretation he liked better.
That was why we were now climbing toward Sector Echo while one of his vehicles burned below us.
Mercer glanced at me as we crossed a dry drainage ditch.
“You knew this might happen.”
“I knew someone had penetrated the installation.”
“That isn’t the same thing.”
“No.”
I looked toward the old radar buildings above us.
“I didn’t know how far they were willing to go to protect it.”
My assignment had started three months earlier with something much less dramatic than gunfire.
Broken scope mounts.
Several installations had reported precision-optic mounts failing inspection far earlier than expected. Different units. Different environments. Same microscopic fracture near the rear lug.
The manufacturer insisted the parts were authentic.
They weren’t.
Someone had inserted counterfeit components into a legitimate military supply chain and copied the serial numbers from real inventory. That alone would have been procurement fraud. What interested my team was what happened around the shipments.
Every installation that received one of the suspect batches also experienced brief encrypted network anomalies within six weeks.
Nothing long enough to trigger a major incident.
Ten seconds here.
Twenty-one seconds there.
Raven Rock had given us seventeen.
The mounts were never the real objective.
They were access tickets.
A contractor could arrive to inspect defective equipment, replace inventory, troubleshoot acceptance records, or verify storage conditions without attracting unusual attention. The counterfeit hardware created its own excuse for people to enter secure areas.
That was why my paperwork from Virginia was genuine.
I really was evaluating rifle hardware.
I was also tracking whoever had learned how to turn military maintenance procedures into doors.
Mercer and I reached the first service road below Sector Echo.
A faded sign warned that the radar compound was inactive. The chain across the road hung loose from one post.
Mercer crouched beside it.
“Cut?”
“No.”
The padlock was intact.
I pointed at the hinge pin.
Someone had driven it out, opened the gate from the opposite side, then pushed the pin back into place.
Mercer’s expression hardened.
His radio crackled.
“Mercer, return to Range Control immediately.”
Briggs’s voice.
Mercer reached for the handset.
I caught his wrist.
“Ask him for authentication.”
He stared at me.
“That is Colonel Briggs.”
“Ask him.”
Mercer hesitated only once that morning, and that was it.
Then he keyed the radio.
“Range Seven requesting challenge response.”
Silence.
Five seconds.
Eight.
Then Briggs’s voice returned, sharper.
“Sergeant, I gave you an order.”
Mercer’s eyes shifted to mine.
He understood.
A real commander could be angry about authentication procedures. He still knew the response.
Mercer gave the challenge from the day’s card.
No answer came.
Instead, the transmission vanished.
He lowered the radio slowly.
“That wasn’t him.”
“No.”
“They can reproduce voices?”
“They don’t need to reproduce them perfectly when everyone is already expecting to hear them.”
We continued toward Sector Echo.
The old radar compound contained three concrete buildings, a collapsed antenna shelter, and a maintenance shed that supposedly had not received power in eleven months.
The maintenance shed had fresh tire marks outside it.
Inside, we found almost nothing.
Two folding chairs. Empty water bottles. A coil of ordinary cable. Dust disturbed near the back wall.
Mercer searched the shelves while I checked an electrical cabinet.
For several minutes, the trail seemed to die there.
That mattered too.
People expect investigations to move from clue to clue like someone has numbered the floor tiles. Real ones stall. You open a door and find a room that looks exactly as empty as somebody intended it to look.
Mercer kicked lightly at one of the chair legs.
“Maybe they cleared out.”
“Maybe.”
I looked again at the dust.
The floor around the electrical cabinet was cleaner than the rest of the shed.
I opened it.
The breakers were dead.
Behind the panel, however, a thin black fiber line disappeared through a hole drilled into the concrete.
Not original construction.
I pulled my black notebook from my pocket and checked a diagram I had copied before arriving at Raven Rock.
Sector Echo had once connected to the installation through buried copper.
No fiber.
Mercer followed the line outside. It ran beneath camouflage mesh, down a shallow trench, and toward the old radar operations building.
We had found the source of the seventeen seconds.
Then we heard an engine.
A gray maintenance truck rolled into the compound from the east road.
It carried the markings of Ardent Peak Systems, one of the contractors involved in decommissioning Sector Echo.
I knew the company.
Their subcontractor identification appeared on two of the counterfeit mount shipments.
The driver saw us and stopped too quickly.
A second man sat beside him.
Neither got out.
Mercer moved behind a concrete barrier and raised his rifle.
I stayed where they could see me.
“Engine off. Hands visible.”
The passenger reached down.
Mercer shouted.
The truck lurched backward instead.
It slammed into the gatepost, corrected, and accelerated toward the east service road.
Mercer looked at me.
“Shoot the tires?”
“No. Too many unknowns downhill.”
He transmitted the vehicle description on an authenticated emergency channel.
This time the reply came from the real Colonel Briggs.
“Mercer, confirm Sergeant Donovan is with you.”
Mercer looked at me before answering.
“Confirmed.”
A pause followed.
Then Briggs said, “Put her on.”
I took the handset.
“Donovan.”
His voice had changed. Still controlled. No longer dismissive.
“General Voss is on my command net.”
“I know who General Voss is.”
Another voice entered the channel.
Major General Helena Voss did not raise hers.
She didn’t need to.
“Colonel Briggs, I am going to make this clear one final time. Master Sergeant Donovan is operating under Granite authority. In matters involving this compromise, her authority supersedes your exercise command. You will support her instructions immediately.”
Nothing moved around me for a second.
Even Mercer stared at the radio.
Briggs finally answered.
“Yes, ma’am.”
Voss continued.
“Sergeant Donovan?”
“Ma’am.”
“You have operational control for containment. Find the breach.”
“Already standing on it.”
I handed the radio back to Mercer.
Forty minutes after Briggs had thrown me toward a hallway, the argument over whether I belonged there was finished.
Unfortunately, the attack wasn’t.
I ordered Briggs to isolate every northern network segment, switch convoy control to authenticated voice procedures, and freeze all civilian contractor movement.
Then I asked one question.
“Where is Captain Grant?”
Silence.
Briggs answered first.
“He left the operations center after the Bravo Three report.”
“Destination?”
“No one knows.”
That was our first real reversal.
The man who had dismissed the seventeen-second burst as interference, presented the communications slide, and watched Briggs throw me out had disappeared at the exact moment the fake friendly positions became useful.
Mercer and I entered the old radar operations building.
The fiber line ended beneath a false floor panel.
Under it sat a compact network bridge, a battery pack, two cloned authentication modules, and a rugged laptop displaying a map of Raven Rock.
Three blue vehicle icons were moving across the screen.
They were not real vehicles.
A fourth icon represented Bravo Three.
Its route had been altered eleven minutes before the explosion.
Not enough to send the convoy completely off course.
Just enough to place its lead vehicle beside a narrow rock cut where an attacker could predict exactly when it would arrive.
I photographed the screen and read the routing history.
One account had authorized the change.
WGRANT.
Mercer exhaled through his nose.
“Captain Grant.”
“His credentials, at least.”
That distinction mattered.
I wasn’t ready to turn evidence into a conclusion just because the name fit.
Then Blake called.
“Sergeant Donovan, we found Grant.”
“Where?”
“Motor pool three. He was trying to leave in a contractor vehicle.”
“Detain him. Do not let anyone touch his phone, badge, laptop, or pockets until military police arrive.”
Grant came onto the radio himself.
“This is insane. My credentials were cloned. That’s what she’s been telling you all morning.”
It was the right defense.
That bothered me.
Because it was true.
Someone had cloned authentication.
Finding Grant’s username proved very little by itself.
I looked again at the network bridge.
Then at my notebook.
The counterfeit mounts had entered Raven Rock under a replacement authorization signed by the installation logistics office. Grant didn’t work logistics.
But he had approved the communications support plan for the contractor team that delivered them.
Still circumstantial.
“Blake,” I said, “when did Grant’s physical access badge enter Sector Echo?”
Keyboard taps came through the radio.
Then Blake answered.
“Three entries in the last month. All after midnight.”
Grant cut in immediately.
“Badge cloning.”
“Possible,” I said.
He went quiet, probably because he hadn’t expected me to agree.
“Check camera archives,” I told Blake.
“Already doing it.”
Briggs came onto the channel.
His impatience had returned, but now it was pointed in the right direction.
“Donovan, can I shut the whole exercise down?”
“Yes.”
I heard him turn away from the radio.
“All stations, Iron Summit is terminated. This is a real-world security incident.”
That decision should have ended the attackers’ advantage.
For about six minutes, I thought it had.
Grant was detained. Sector Echo was isolated. The fake convoy positions disappeared when communications physically disconnected the northern feed. Military police closed both installation gates.
Bravo Three’s wounded driver was conscious and being evacuated.
The gray Ardent Peak truck had been stopped near an eastern maintenance road.
It looked over.
Then Blake said four words.
“We have another convoy.”
I turned toward Mercer’s radio.
“Say again.”
“A full friendly signature just appeared east of Sector Echo.”
“There shouldn’t be any network connection left.”
“There isn’t.”
That was the collapse.
The false signature wasn’t entering from Sector Echo anymore.
It was coming from inside Raven Rock’s primary network.
Grant smiled when Briggs told him.
I couldn’t see it, but Briggs described it later.
Not a big smile.
Just enough.
Grant had expected us to find the radar site.
Sector Echo wasn’t the attack.
It was the decoy node.
The real access had already moved.
I looked at the rugged laptop again and noticed a small detail in the route table. Every ghost position carried an authentication refresh from the same service identifier.
MED-4.
Medical evacuation coordination.
One of the few systems commanders were reluctant to disconnect during an emergency.
Grant hadn’t simply exploited Briggs’s ego.
He had studied his priorities.
He knew that after a real casualty, Briggs would protect medical tracking even while shutting down the exercise.
“Blake, isolate MED-4.”
“Colonel’s staff says that will blind the evacuation team.”
“Do it.”
Briggs answered before Blake could.
“Execute Donovan’s order.”
The channel dropped silent.
Then Mercer pointed through the radar building’s broken northern window.
A helicopter was lifting from the lower pad.
It turned east.
Not toward the hospital route.
Toward the false convoy.
“Who authorized that aircraft?” I asked.
Blake checked.
“MED-4. Priority casualty pickup.”
There was no casualty east of Sector Echo.
There was, however, the Ardent Peak truck we had stopped.
And the passenger who had reached down before the driver fled.
The truck was never supposed to escape through the gate.
The helicopter was their second exit.
I keyed the radio.
“Briggs, ground that aircraft.”
“Tower says the pilot has authenticated casualty coordinates.”
“They’re false.”
Briggs didn’t argue this time.
“Tower, cancel launch clearance. Emergency recall.”
No response.
The helicopter kept moving.
The compromised network was still feeding the crew.
So Briggs did something wonderfully unsophisticated.
He ran out of his operations center, crossed to the backup visual-control position, and ordered the red recall panel fired from the tower.
Three bright emergency signals rose over Raven Rock.
The pilot saw them.
The helicopter banked hard, leveled, and turned back toward the pad.
At almost the same moment, Blake isolated MED-4.
The ghost convoy vanished.
The network finally went quiet.
Military police opened the Ardent Peak truck under controlled conditions.
Behind a false equipment panel they found two secure communications modules, copied contractor badges, a portable transmitter, and replacement labels matching serial numbers on the counterfeit scope mounts.
The passenger was an Ardent Peak technician with access to Raven Rock’s decommissioning records.
The driver had worked temporary maintenance contracts at two other installations where my team had documented the same seventeen-to-twenty-second encrypted anomalies.
And Captain Wesley Grant?
The cameras answered the question his cloned-credential defense could not.
At 2:13 a.m., three nights earlier, he had entered Sector Echo wearing civilian clothes.
No badge clone could explain his face.
His financial records were examined afterward under proper legal authority. Investigators found payments routed through an intermediary connected to one of Ardent Peak’s subcontractors.
The Rolex had not proved anything that morning.
It never needed to.
The evidence did.
Grant had provided schedules, exercise architecture, and internal procedures. The contractor team supplied the counterfeit hardware and technical access. During Iron Summit, they used cloned authentication to create false friendly positions, shape traffic away from the eastern corridor, and manipulate convoy routing.
The attack on Bravo Three was meant to create a real emergency large enough to keep command attention fixed elsewhere while compromised communications equipment was removed from Sector Echo and carried off the installation.
They nearly succeeded because every individual action looked explainable by itself.
A defective mount.
A short burst of interference.
A contractor visit.
A strange vehicle icon.
An officer interpreting a regulation narrowly.
Nothing became frightening until you connected them.
Colonel Briggs found me outside the operations center shortly after noon.
His uniform was dusty from running between buildings. He looked older than he had at breakfast.
Mercer stood several yards away with Blake, giving us space without pretending not to listen.
Briggs held out a radio.
The same one he had slammed onto the map table.
“I believe this belongs to you.”
I looked at it but didn’t take it immediately.
“How is Bravo Three’s driver?”
“Stable. Broken arm, concussion, shrapnel injuries. Doctors expect him to recover.”
I nodded.
Briggs stared toward the mountains.
“I heard General Voss the first time.”
“I know.”
“I convinced myself she meant your authority was technical.”
“You heard what was convenient.”
“Yes.”
There wasn’t much value in making him say it twice.
He handed me the radio.
“I was wrong.”
“You were.”
His jaw tightened, but he accepted it.
“What happens now?”
“Now you preserve every log, every recording, every access record, every device, and every order connected to this exercise. Then investigators decide the rest.”
“And Grant?”
“He gets due process.”
Briggs almost smiled.
“That sounded disappointingly professional.”
“Revenge makes terrible evidence.”
I opened my black notebook.
That morning Briggs had treated it like an evaluator’s scratch pad carried by a sergeant who was supposed to inspect rifle mounts and stay out of important conversations.
By noon it held the first handwritten chain of events for what would become a much larger investigation: the seventeen-second burst, the cloned IFF positions, Sector Echo, MED-4, Grant’s access, and the Ardent Peak truck.
Briggs signed the evidence-transfer notation at the bottom of the page.
Then he looked at the radio in my other hand.
“Anything else you need from me?”
I handed the radio to Mercer.
“Yes.”
Briggs waited.
“Next time one of your people tells you something impossible is happening, don’t start by asking whether they have enough rank to be right.”
His eyes dropped for a moment to the radio he had once taken from me.
Then he nodded.
“No, Sergeant.”
This time, he listened.
