Cybersecurity exercises included two scenarios: Defence and Response. During the first scenario participants practiced repelling an active APT cyberattack. The teams' goal was to protect their segment of the training infrastructure. According to scenario, BI.ZONE experts acted as the Red Team, exploited the vulnerabilities in the infrastructure and simulated cyberattacks on a business-critical service which processes confidential client information. The participants had to cope with the attack as fast as possible, minimise the amount of information stolen and maintain service availability. They could also fix vulnerabilities by improving the service code.
In the second scenario teams had to investigate the incident by first implementing classic forensic techniques and then with the use of threat hunting methods, specialists hunted the intruders in the infrastructure. Finally, participants practiced composing a dossier about the incident that in real life would help law enforcement agencies locate the cybercriminals.
Cyber Polygon became is the first training of such format and scale for corporate teams in the world.