RANSOMWARECASE 01
Project Blackout
Domain controllers are dropping offline, extensions are changing to .locked, and an urgent ransom note appeared on the CEO workstation.
INITIAL THREAT
50%
AVG. RUNTIME
18–24 min
Incident command interface // 01
Stay calm.
Contain the chaos.
A live-fire incident response simulator for the moments when every decision changes the shape of the breach.
AVAILABLE EXERCISES
Choose your incident
SOCIAL ENGINEERINGCASE 02
Operation Phantom Voice
Accounts Payable received a high-priority voice memo from the CFO requesting an immediate $1.8M transfer to an overseas vendor.
INITIAL THREAT
35%
AVG. RUNTIME
12–16 min
DATA EXFILTRATIONCASE 03
Operation Glasshouse
A customer export has appeared in a private Telegram channel while journalists ask whether the company knew about the exposure.
INITIAL THREAT
55%
AVG. RUNTIME
16–22 min
INSIDER THREATCASE 04
Project Lantern
A departing administrator is copying privileged files to a personal cloud drive while their access remains active.
INITIAL THREAT
45%
AVG. RUNTIME
14–20 min
STAKEHOLDER-LEDBRING YOUR OWN
Create your own exercise
Design a custom scenario for your team's specific threat landscape.
NIST-aligned decision engine
Dynamic telemetry events
Private simulation environment