Wizard Spider Hybrid Exercise

WIZARD SPIDER HYBRID EXERCISE

MSNG Cyber Team  |  MGCCC iMPact Center, Mississippi  |  MCI Cyber Range

// ANALYST BRIEFING

A Mississippi public school district's network has been compromised by an affiliate of the Wizard Spider criminal enterprise. Red Team is live-executing the intrusion chain in real time — your job is to detect it, correctly identify each MITRE ATT&CK technique as it happens, and submit your findings before the trail goes cold.

Every team works the same environment in parallel. There is no fixed schedule — you're scored against what Red actually does, not a script.

event:PRJ017 — Wizard Spider
mode:Live-fire, team-based
scoring:ATT&CK technique ID + log evidence
platform:Security Onion