Cyber Range Endpoint Security Security Transformation
Cyber Range

🦅 CrowdStrike CTF: Falcon

Event Overview

CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology. Tools utilized within the game: Crowdstrike Falcon (EDR tool, end point protection and analysis) Crowdstrike Logscale (History and logging) CrowdStrike Cloud Security CrowdStrike Identity Threat Protection This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.

What to expect

Here's the sitch.... A nefarious, secret collective of bad actors and hackers called The League have infiltrated Iron Guardian, a global financial services firm that is now enlisting our help to mitigate the imminent threat and avert economic catastrophe.
  • Explore a custom scenario based on CrowdStrike Falcon: Our scenario has been meticulously crafted to provide a realistic and challenging cybersecurity emulation of a network under attack.
  • Test your skills: You'll face various cybersecurity challenges and incidents that will put your knowledge of CrowdStrike to the test.

Goals and Objectives

Using any means necessary, your team (3-4 players) has six hours to scan your organization's environment, identify compromised systems and footholds, and defend Iron Guardian's network. Tools utilized within the game: Crowdstrike Falcon (EDR tool, end point protection and analysis) Crowdstrike Logscale (History and logging) CrowdStrike Cloud Security CrowdStrike Identity Threat Protection F5 (Web application gateway - application inspection) Kubernetes – WWT learning Path (training on container environments) Docker (application containers) Wireshark (protocol inspection)

Who should attend?

Teams who need training on Blue Team tactics, SOC, IR Specialists and Infrastructure Engineers, Cyber Engineers and Cyber Architects, teams looking to up level their skill sets and build ways of working together.

Related content

Page Thumbnail
Security Operations

Cyber Range Player Orientation for Container Orchestration

Familiarize yourself with the essential Docker and Kubernetes commands that will be helpful during the Cyber Range Event.
Learning Path
Page Thumbnail
Network Security

Cyber Range - Initiation

Initiation is a Capture the Flag (CTF) lab meant to introduce you to the WWT Cyber Range platform and serve as a tutorial for future events. You will be introduced to the features and functionality as well as provided tips for success during future WWT Cyber Range CTFs. This lab will also allow you to test your access using the same platform we use for our live CTF events so you can make sure you will be ready on game day.
Advanced Configuration Lab
1530 launches
Page Thumbnail
Endpoint Security

CrowdStrike EDR

Learn about CrowdStrike Falcon Insight, CrowdStrike's Endpoint Detection and Response (EDR) technology. Falcon Insight ensures customers have comprehensive, real-time visibility into everything that is happening on their endpoints as well as helps you respond to and remediate threats effectively, getting you back to business quickly. In this Learning Path, you will explore the architecture on which CrowdStrike Falcon Insights runs, as well as the deployment of CrowdStrike Falcon agents and configuration of policies. You will also learn about the detection and response capabilities that are provided by CrowdStrike Falcon Insight.
Learning Path