CYBER RESILIENCE

EXPERIENCE DIRECTORY
PRESENTER EXPERIENCESChoose the story that fits the room
DIRECTORY
ⓘ
Use this guide on how to use this Simulation Tool

Contact the Trellix Threat Simulation team with any suggestions.

Contact
EXPERIENCE DIRECTORY

Choose the story
that fits the room.

Choose between organisation-wide cyber narratives, operational-edge missions, maturity journeys and technical deep dives—each built for a different conversation.

01
CAPABILITY ASSESSMENT

Capability Gap Assessment

The flagship federal-government ransomware and critical-services scenario used for the Trellix booth experience.

Full Trellix platformConfigurable capability gaps
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
02
DATA SECURITY

Insider Data Exfiltration

Follow a trusted user as sensitive citizen and engineering records move toward personal cloud storage and removable media—and see policy enforcement stop the loss.

DLPDevice ControlDatabase SecurityESM
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
03
OPERATIONAL TECHNOLOGY

IT-to-OT Intrusion

Track an enterprise compromise across the industrial boundary to an engineering workstation, then preserve plant availability with passive visibility and trusted-change controls.

NDRNozomi NetworksApplication ControlEDRF
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
04
SECURITY OPERATIONS

AI-Assisted SOC Investigation

Turn scattered alerts into one evidence-led case, let Trellix Wise explain the attack, and show a controlled automated response from triage to recovery.

Trellix WiseESMHelixHyperautomation
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
05
EMAIL & COLLABORATION

Collaboration Platform Attack

Follow a weaponised file shared through a collaboration platform as IVX reaches a verdict, endpoint controls preserve evidence, and the campaign is removed across the organisation.

Email SecurityIVXEDRFHyperautomation
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
06
CRITICAL SYSTEM INTEGRITY

Unauthorized Software Change

Show how a compromised supplier update is inspected, traced and denied when it attempts to alter a fixed-function server or engineering workstation.

Application and Change ControlEDRFePONDR
NATIONAL SERVICES AUTHORITYNine stages · 3m 00s
Open experience
EV
PRESERVED EVENT EXPERIENCE

Event Only Simulation

The earlier organisation-wide index experience, preserved for event-only playback while the scenario pages use the new fixed presenter layout.

Threat signalsDefence layersOriginal layout
National Services AuthorityNine-stage simulation
Open event simulation
TV
FIRE TV · AMAZON SILK

Event Only · TV Edition

A dedicated conference-display version of the Event Only Simulation. It keeps the map full width, with the stage detail available when you select a node or stage.

16:9 displayRemote-ready playMap-first layout
National Services AuthorityNine-stage simulation
Open TV edition
MATURITY & POSTURE

Move from controls to resilience.

E8
AUSTRALIAN ESSENTIAL EIGHT

Three-level maturity journey

Explore how all eight ASD mitigations progress through Maturity Levels 1, 2 and 3 in a visually distinct, interactive posture experience.

ML1 · EstablishML2 · ExtendML3 · Harden
ASD Essential EightInteractive journey
Open maturity journey
OPERATIONAL EDGE & DDIL

Defend the mission when reachback cannot be assumed.

OE
JOINT TASK FORCE · DDIL

Cyber threats at the operational edge

Follow a dormant supply-chain foothold through local discovery, valid-account movement, intelligence staging, mission-timed disruption, burst-window exfiltration and restoration of system and mission trust.

Endpoint SecurityEDR ForensicsNDRePO On-Prem
Joint Task Force SentinelTwelve stages · 3m 18s
Open operational-edge simulation
PLATFORM COMMISSIONING AT SCALE

Establish Trellix management across the fleet.

FR
TRELLIX + RED HAT ANSIBLE · ON-PREMISES

Re-arm the fleet

Use Ansible to install Trellix Agent for the first time across garrison, satellite, tactical and classified sites. After registration, ePO takes over products, policy and ongoing lifecycle management.

Ansible AAPTrellix AgentePO On-PremEndpoint Security
National Defence Support GroupNine stages · 2m 30s
Open fleet re-arm
AI-POWERED SECURITY OPERATIONS

Follow the evidence to a defensible decision.

AI
TRELLIX WISE · ON-PREMISES

Agentic alert investigation

Follow one suspicious PowerShell alert through approved on-prem sources, evidence-led reasoning, analyst approval and precision response—without treating Wise as the enforcement control.

WiseePO On-PremEDR ForensicsHyperautomation
National Services AuthorityTen stages · 2m 45s
Open Wise simulation
TECHNICAL DEEP DIVE

Go inside the endpoint.

ED
ENDPOINT DEEP DIVE

Trellix EDR with Forensics

What happens inside a single endpoint: a fileless phishing payload on one laptop, and the seven Trellix components that prevent, detect, investigate, hunt, respond and remediate—entirely on-premises.

National Services AuthorityTen stages · 2m 45s
Open deep dive