ThreatSpace Workshops with Countersight and Mandiant, Google Cloud Security

This 3-hour interactive session will have attendees participate in a ThreatSpace scenario, where they will use threat intelligence to hunt for indicators of compromise in a simulated enterprise environment.

This capability was developed locally, to meet the training needs of our Federal Government’s front line cyber security workforce. The goal with Threatspace is to use a cyber scenario and enable technical tradecraft to be practiced with mentorship and guidance from Mandiant and Countersight consultants. This workshop is based on real world environments and scenarios and leverages Google SecOps and Mandiant’s unique and globally sourced threat intelligence.

Participants should expect to work through a mini scenario based on real world threat actors, in a fun and challenging setting.
Who should attend?
This workshop is based on a technical scenario, attendees should have an understanding of technical concepts and practice around Incident Response, methodologies. Examples of target roles include:

• SOC Analysts
• Incident Response Analysts
• Threat Hunters
• Malware Reverse Engineers
• Cyber Threat Intelligence Analysts

Managers and Team leads are welcome to attend to observe, gain insight into decision making in an incident response scenario and meet the Countersight and Mandiant team.

Pre-requisites

Participants will need to bring a laptop running a recent web browser (Chrome recommended) in order to access the Threatspace platform.

Snacks will be provided, and lunch will be served after the exercise to debrief and discuss the workshop.

Host or Publisher Countersight