WIZARD SPIDER HYBRID EXERCISE
MSNG Cyber Team | MGCCC iMPact Center, Mississippi | MCI Cyber Range
// ANALYST BRIEFING
A Mississippi public school district's network has been compromised by an affiliate of the Wizard Spider criminal enterprise. Red Team is live-executing the intrusion chain in real time — your job is to detect it, correctly identify each MITRE ATT&CK technique as it happens, and submit your findings before the trail goes cold.
Every team works the same environment in parallel. There is no fixed schedule — you're scored against what Red actually does, not a script.
event:PRJ017 — Wizard Spider
mode:Live-fire, team-based
scoring:ATT&CK technique ID + log evidence
platform:Security Onion