How would you respond if law enforcement reported finding your organization’s financial information in a threat actor’s possession? This drop-in Village invites participants to investigate a simulated FIN7 intrusion using WSU Tech’s Cyber Range. Participants can join at any time, work individually or with others, and explore one or more stages of the incident. The investigation uses SIEM alerts, firewall traffic, Windows events, and system artifacts to reveal phishing-enabled access, network reconnaissance, command-and-control activity, lateral movement, scheduled-task persistence, financial-data staging, and exfiltration. Participants may focus on identifying the initial compromise, tracing attacker movement, confirming data loss, or developing containment and recovery recommendations. Those who remain longer can continue through the complete incident sequence. FIN7 represents one of the many realistic simulations available through WSU Tech’s Cyber Range. Participants will leave with practical investigative experience, a clearer understanding of their current capabilities, and specific cybersecurity skills to continue developing.

LIVE demo of an OT system you can build yourself, complete with Programmable Logic Controller (PLC), Human Machine Interface (HMI) and all the hardware and wiring! - Program a PLC - Program an HMI - Attack the industrial process! (Rogue Modbus and Modbus Man-in-the-middle) - Detect the attacks with Zeek and Snort! - Lots of blinking lights. mmmm... If you're interested in getting hands-on experience with OT without breaking the bank, this is for YOU! Check out the kit project GitHub for a look at what we're bringing! https://github.com/oniskin/PLC-Trainer-Kit