How would you respond if law enforcement reported finding your organization’s financial information in a threat actor’s possession? This drop-in Village invites participants to investigate a simulated FIN7 intrusion using WSU Tech’s Cyber Range. Participants can join at any time, work individually or with others, and explore one or more stages of the incident. The investigation uses SIEM alerts, firewall traffic, Windows events, and system artifacts to reveal phishing-enabled access, network reconnaissance, command-and-control activity, lateral movement, scheduled-task persistence, financial-data staging, and exfiltration. Participants may focus on identifying the initial compromise, tracing attacker movement, confirming data loss, or developing containment and recovery recommendations. Those who remain longer can continue through the complete incident sequence. FIN7 represents one of the many realistic simulations available through WSU Tech’s Cyber Range. Participants will leave with practical investigative experience, a clearer understanding of their current capabilities, and specific cybersecurity skills to continue developing.

LIVE demo of an OT system you can build yourself, complete with Programmable Logic Controller (PLC), Human Machine Interface (HMI) and all the hardware and wiring! - Program a PLC - Program an HMI - Attack the industrial process! (Rogue Modbus and Modbus Man-in-the-middle) - Detect the attacks with Zeek and Snort! - Lots of blinking lights. mmmm... If you're interested in getting hands-on experience with OT without breaking the bank, this is for YOU! Check out the kit project GitHub for a look at what we're bringing! https://github.com/oniskin/PLC-Trainer-Kit

Earn your cybersecurity meritbadge in one session, from a local area meritbadge counselor and cyber professional! (Open to scouters and non scouters) *if you're a scout wanting to receive the merit badge there is a $10 registration cost. *for scouters please register here: https://scoutingevent.com/198-120736

For far too long the cybersecurity landscape has been guarded by walls of fire. Explore bypassing walls that aren't made of fire! In this village we will have interactive demonstrations and labs in which attendees will be able to: - Bypass common door locks - Pick locks open - Bypass physical security systems - Utilizing physical environmental information for espionage type tactics - Get to use tools of the trade! attendees are not required to bring any utilities, however they are welcome to bring tools if they'd like.

When applications are slow, users are frustrated, and vendors insist that "the problem isn't on our side," where do you turn for the truth? The answer is in the packets. In this practical, real-world session, we'll explore how packet analysis remains one of the most powerful troubleshooting tools available to IT professionals. From network latency and authentication failures to application performance issues and security investigations, packet captures provide an unbiased view of what is actually happening on the wire. Through real-world examples and case studies, attendees will learn how to use packet data to quickly identify bottlenecks, validate assumptions, resolve disputes between teams and vendors, and uncover root causes that traditional monitoring tools often miss. Whether you're a systems administrator, network engineer, security analyst, or IT leader, you'll gain a deeper appreciation for how network traffic reveals the truth behind complex technology problems. Because logs can be incomplete, dashboards can be misleading, and everyone has a theory. But packets don't lie. Key Takeaways: Understand when packet analysis is the right troubleshooting tool Learn a structured approach to investigating performance and connectivity issues See real examples where packets exposed the true root cause Discover how packet captures can bridge the gap between network, server, application, and security teams Leave with practical techniques you can immediately apply in your environment