Join us for a member only cyber range team sim exercise
Operation Sunder is a defensive range aimed at users with a beginner to intermediate knowledge level of incident response, threat hunting, and defensive tools.
ForwardEdge Corp is a leader in stock market analytics and trading technologies. You’re members of the internal security team, and your role is to detect threats to the ForwardEdge organization.
On the morning of July 26, 2024, you begin your daily routine of reviewing your organization’s security alerts. You've received a report from an employee. The person sitting next to them downloaded an office document via email, opened it, and enabled macros. The user’s workstation where this occurred is labelled HR01.
With this information, examine and analyze the incident to determine what has happened.
This exercise provides:
- Hands-on experience to build real-world skills in a low-pressure environment
- Practice with the latest tools and techniques to defend and protect your networks before, during, and after an attack
- Scenarios and techniques that can be used to inform your firm's formal incident response playbooks and checklists
- Opportunity to compete and collaborate with industry peers to enhance best practices
How it works:
- Members will compete in teams of up to 10
- Individual registrants are placed on teams with their peers and compete against other member organizations
- Teams will compete amongst themselves and will be scored according to number of completed tasks, accuracy, and time taken
Event details:
- FS-ISAC members only
- $495 fee per person, due at registration. Full 10-person team registration is available at a discount; please contact exercises@fsisac.com for more details.
- Experience level: Beginner to intermediate
Time: 9:00 AM - 5:00 PM ET
Date: 18 - 20 November 2025
How to register:
- Members: To register, log in via Intelligence Exchange dashboard*, select the Member Services icon. From this dashboard, select the Event/Training tab and select the exercise.
- *If you are a member and do not have an Intelligence Exchange account, please contact memberquestions@fsisac.com.
- If your financial institution is not a member of FS-ISAC, join FS-ISAC today.
This exercise runs on the Immersive Labs platform and does not have any specific device requirements.