OBSERVED
A procurement mailbox received a convincing message carrying a malicious document and link.
See how Trellix can stop threats.
Every step of the way.LIVE CYBER DEFENCE EXERCISENational Services Authority · Ransomware → critical services
FICTIONAL SCENARIOⓘ
Use this guide on how to use this Simulation Tool
Contact the Trellix Threat Simulation team with any suggestions.
ContactAFFECTEDSally MorganFinanceFIN-LT-042
SIGNAL
ZONE 01SaaS & EXTERNAL ACCESSEmail, cloud and remote users
ZONE 02ON-PREM ENTERPRISEIdentity, endpoints, data and SOC
ZONE 03CRITICAL INFRASTRUCTUREControlled industrial environment
ATTACK PATHNORMAL TRAFFICTRELLIX RESPONSE
Ready · Press play
Nine stages, one department, from first contact to contained and recovered.
03:00/ 03:00
Standing by.
TRELLIXEmail Security inspects the attachment and URL; what has no signature; Threat Intelligence links it to a known campaign.