Join us for a member only cyber range team sim exercise
Orchid Corporation has a global IT infrastructure supporting multiple services from e-commerce to data analytics. You are members of the internal security team whose role is to detect threats to the Orchid Corporation organization.
It’s August 5, 2024, and your day has been quiet so far as you review the Orchid Corporation’s security alerts.
At 14:30 UTC, a colleague forwarded you a screen shot of a suspicious email. They explained they received an email with a document attached that they believed was from the internal support team. Following the email's instructions, they unblocked and saved the document before opening it and enabling macros.
The document has been hanging for a couple of hours, which they thought was expected behavior, but they've now realized that the email is not from a legitimate email address for the organization.
With this information, you will examine and analyze the incident to determine what has happened.
This exercise provides:
- Hands-on experience to build real-world skills in a low-pressure environment
- Practice with the latest tools and techniques to defend and protect your networks before, during, and after an attack
- Scenarios and techniques that can be used to inform your firm's formal incident response playbooks and checklists
- Opportunity to compete and collaborate with industry peers to enhance best practices
How it works:
- Members will compete in teams of up to 10
- Individual registrants will be placed on teams with peers from fellow member organizations
- Bulk registrations may choose to participate on a team together or be split between existing teams
- Teams will compete amongst themselves and will be scored according to number of completed tasks, accuracy, and time taken
Event details:
- FS-ISAC members only
- $495 fee per person, due at registration. Full 10-person team registration is available at a discount; please contact exercises@fsisac.com for more details.
- Experience level: Beginner to intermediate
- A certificate of completion template will be available to attendees for continuing professional education submission
Time: 9:00 AM - 5:00 PM ET
Date: 23 - 27 June 2025
How to register:
- Members: To register, log in via Intelligence Exchange dashboard*, select the Member Services icon. From this dashboard, select the Event/Training tab and select the exercise.
- *If you are a member and do not have an Intelligence Exchange account, please contact memberquestions@fsisac.com.
- If your financial institution is not a member of FS-ISAC, join FS-ISAC today.
This exercise runs on the Immersive Labs platform and does not have any specific device requirements.