Priority-One Incident Simulation
Blackout Protocol
A multi-stage cybersecurity decision game built around a realistic cloud-and-endpoint compromise. Act as incident commander: identify the signal, correlate evidence, contain the attack, prioritize remediation, and brief leadership—before operational risk becomes business impact.
Your name stays in this browser and is used only to personalize your mission and report.
Estimated completion: 4–6 minutes · No login · Defensive simulation
CASE // IR-000000
Operation Silent Session — Active Incident
Operator
06:00
After-Action Report Generated
Incident Contained. Mission Accomplished.
OperatorIncident commander
0Final score
AIncident grade
00:00Response time
LowResidual risk
Capability Profile
Framework Alignment
- NIST Incident Response lifecycle: detection, analysis, containment, eradication, recovery, and lessons learned.
- MITRE ATT&CK techniques surfaced: valid accounts, OAuth abuse, PowerShell, command and control, and credential access.
- Zero Trust principles applied through session revocation, identity verification, endpoint isolation, and least privilege.