A premium Ransomware workshop for SOC and IR teams

Thursday Nov 18^th, 2021

MITRE ATT&CK Experience

What is the Cyberbit MITRE ATT&CK Workshop?

09:00 AM

Welcome session

Copyright © 2021 Cyberbit. Privacy policy

To prepare SOC and IR teams to respond to attacks, particularly ransomware, this workshop provides a unique opportunity to experience a live attack, simulated in a cyber range. Participants will run two live-fire exercises where they will immerse in a virtual SOC and respond to the simulated attacks using commercial security tools, including a SIEM, Firewall, and network analysis tools. 

The exercises are aligned with the MITRE ATT&CK framework and allow attendees to experience 
27 MITRE ATT&CK techniques - LIVE.

The exercise is powered by Cyberbit, the most widely used SOC readiness and cyber skills development platform. This is a FREE initiative to promote the Cyberbit platform. 

Exercises are limited in space and run in small teams of 8. Seats are available on a first-come basis.   

Hands-on live-Fire exercise #1

 Exercise #1 debrief

Lunch

Hands-On live-fire exercise #2

Exercise #2 debrief

Workshop complete

09:30 AM

12:30 PM

01:00 PM

02:00 PM

04:30 PM

05:00 PM

How It Works

The workshop runs for one day. You may register up to 3 people from a single organization. Workshops run in boutique format, in small teams of up to 8, each team led by a cyber range instructor. We will simulate 2 cyberattacks while teams will practice the response using tools like a firewall, SIEM and network analysis. The events are virtual and run over Zoom. Attendees will receive login details to the cyber range platform during the session.

CISOs and SOC Managers: Why Register Your Team?

By attending this FREE high-impact workshop, valued at roughly $1200/person, you will:

• Benefit from a premium cyber range exercise for free
• Stress-test your SOC and IR team's capabilities in real-world incidents
  
• Prepare your team for ransomware attacks, and improve MTTR 
• Allow your team to qualify for CPE credits
• Receive a detailed exercise report after the workshop

You are welcome to register too!

Qualify for CPE Credits

Earn CPE Credits by participating in the Cyberbit workshop. Exercises are eligible for CPE credits with both (ISC)2 and EC-Council.

Cyberbit will also provide a complementary debrief call to review trainer feedback. Participants will receive certificates of completion. 

Workshops are at high-demand and limited in space. 
Seats are allocated on a first-come basis. Reserve your seat today!

What Participants Said:

Daily Workshop Agenda

Experience 27 MITRE ATT&CK Techniques Including:

Initial Access

Execution

Persistence

Lateral Movement

External Remote Services

Command and Scripting Interpreter

External Remote Services

Execution

Server Software Component

Phishing

Defense Evasion

Modify Registry

Lateral Tool Transfer

Exfiltration

Exfiltration Over Alternative Protocol

FAQ

• Why does Cyberbit offer free ransomware exercises, normally worth $1200 per person?
  We offer these workshops as a promotion for our platform, and to increase awareness for a new and innovative way of preparing SOC teams. We'd love you to sign up your team for the platform, however,  we also want your team to learn, enjoy, and make the most of their valuable time, so we will minimize marketing talk during the workshop, and focus on delivering the best possible exercise. 
  
  
• How long is the workshop? 
  The workshop runs for 8 hours, 9 AM EST - 5 PM EST. 
  
  
• What time zone is the workshop?
  The workshop runs in Eastern Standard Time and Pacific Standard Time. We do our best to accommodate attendees in their respective time zones
  
  
• How many people may I register? 
  You may include up to 3 people from your organization.
   
• What is the quality of the exercise?  
  To maximize your learning experience, we limit the number of people participating in the workshops to a maximum of 8 individuals. 
  Each team is led by an experienced cyber range instructor. 
  
  
• How will the day look like? 
  After joining the Zoom session your team will receive login details to the cyber range platform. We will accommodate your team on the cyber range and then simulate one full cyberattack. Your team will practice the investigation and response process using security tools like a firewall, SIEM, and network analysis. Our instructor will guide your team and provide tips that will help them to confront similar situations on the job. 
  
  
• Does my team need to travel? 
  No, the workshop is virtual and runs over Zoom. Your team will have remote access to the cyber range and security tools.
  
  
• Will my team get proof of participation?
  Yes, your team will receive certificates of completion. The workshop qualifies for CPE credits. 
   
• Which cybersecurity roles is the workshop for?
  The workshop is recommended for hands-on SOC and IR professionals, and managers.
  
  
• Is the workshop limited to experienced participants? 
• No, any SOC and IR practitioner will benefit from the workshop, from tier-one to expert. Registrants are asked to provide their level of experience during registration and we will aim to accommodate attendees in a group that matches their experience.
  
  
• How do I qualify my team for a free workshop?
  As mentioned, we run the workshop in small teams and spaces are very limited. To qualify for the workshop your organization should have a security operations center (SOC) or an incident response team. To confirm your attendance you’ll be required to participate in a preparation call in advance of the workshop, where our trainer will acclimate your team to the cyber range and review the workshop process. A manager has to be present on this call.