FS-ISAC Upcoming Events, Summits, Webinars and Exercises

FS-ISAC Cyber Range Exercise | Forensic Analysis Americas | April 2024

Written by FS-ISAC | Dec 19, 2023 10:16:07 PM

Join us for a member only cyber range exercise

Today’s cybersecurity professionals can no longer afford to specialize in niche skills. Having a well-rounded skillset is a must, regardless of your role. 

This exercise provides:
  • Hands-on experience with a real-world scenario that develops skills in a low-pressure environment.
  • Practice with tools to include Elasticsearch / Kibana, Fleet / OSQuery, Velociraptor and FlareVM.
  • The latest tools and techniques that defend and protect your networks before, during and after an attack.
  • Learning that can be used to inform formal incident response playbooks and checklists.
  • Opportunity to compete and collaborate with industry peers to respond and remediate incidents.
  • Certificate of Completion available for Continuing Professional Education credit(s).

The scenario:

After a medium alert from its antivirus solution, an internal Security Operations Center (SOC) has noticed potential suspicious activities in its environment and the way it's been used. The SOC team decides to bring the network down, imaged it and reverted to a previous backup. These actions appear to have resolved the problem. You are asked to review the imaged network as a forensic analyst. Your role is to find out if and how the attacker got in, how they laterally moved, what they exploited, and what their objective or goal was.

How it works:

  • Teams are comprised of ten participants. 
  • Register individually and you are placed on a team with individuals from similar firms. 
  • Register ten or more individuals and you can choose to be your own team(s) or split up to work with individuals from similar firms.
  • Teams compete against each other and are scored according to number of completed tasks, accuracy and time required.
  • Contact exercises@fsisac.com for a discount available if registering ten or more individuals.

Event details:

  • FS-ISAC members only
  • $495 fee per person
  • Experience level: Beginner to intermediate
  • Some network defender experience or technical training is recommended

Time: 11:00 AM - 4:00 PM CST

Date: Wednesday, 24 April, 2024

How to register:

  • Members: To register, log in via Intelligence Exchange dashboard*, select the Member Services icon. From this dashboard, select the Event/Training tab and select the exercise.
  • *If you are a member and do not have an Intelligence Exchange account, please contact memberquestions@fsisac.com.
  • If your financial institution is not a member of FS-ISAC, join FS-ISAC today.

This exercise runs on the Immersive Labs platform and does not have any specific device requirements.