Overview
This fictional event demonstrates the format for future Aegis Lab event pages. The scenario simulates a late-night blue-team response window with attacker noise, alert triage, and rapid communication under time pressure.
Structure
- 45-minute live alert triage phase with rotating analysts.
- 30-minute containment and verification phase.
- 20-minute report and executive summary submission.
Expected Outputs
- Incident timeline with confirmed indicators.
- Priority remediation checklist for impacted systems.
- Team debrief notes for next training cycle improvements.
Resources
Warmup packs and scenario materials can be distributed through the team CTF workspace: Open Team CTF Website