Cyber Simulation Real-Time Workshop - Online Webinar

The CrowdStrike Incident Response Team invites you to this real-time cyber simulation workshop, featuring a brand-new scenario.

Based on real adversaries actively targeting organisations today, the session offers a realistic view into how fast-moving attacks develop - and how key decisions shape the outcome.

Throughout the exercise, you’ll gain insights into how sophisticated threat actors gain an initial foothold, move across endpoint, AI and cloud environments, escalate their operations and challenge even well-prepared teams.

This workshop is designed to provide practical guidance on how to navigate a real cyber incident — whom to involve, how to prioritise and which early decisions influence the outcome. We focus on sharing frontline experience and actionable insights to help you prepare for scenarios every organisation must be ready to manage.

Choose-Your-Own-Adventure Format

In this interactive format, you take the lead.

At every stage of the simulation, you vote via a poll app provided by us on critical decisions that determine the direction of the incident. Across 5–7 injects, your collective choices influence escalation paths, response options and the remaining time window.

This scenario focuses on a financially motivated adversary targeting a European financial services organisation, turning an initial endpoint compromise into a wider attack spanning AI systems, cloud infrastructure and sensitive production data — reflecting how the enterprise attack surface is evolving as AI becomes embedded across the organisation.

The CrowdStrike Incident Response Team will be joined by Tim Jones from our Law Firm Partner, Norton Rose Fulbright LLP. When a cyberattack occurs, organizations face a complex web of legal obligations and potential liabilities. Our guest speaker Tim Jones will examine these legal aspects.

Benefits of Attending

Realistic, risk-free training: Experience a controlled environment that mirrors the pace, ambiguity and pressure of real cyber incidents.

Decision-making under pressure: Evaluate signals, prioritise actions and navigate uncertainty as the scenario unfolds.

Understanding modern adversary behaviour: Gain visibility into how modern adversaries combine endpoint, identity, AI and cloud attack paths to achieve their objectives.

Collaboration and communication: Work alongside peers and experience first-hand how coordination impacts containment and recovery.

Knowledge exchange: Hear different perspectives and best practices from attendees across industries.

Time sensitivity: See how risk levels shift with each decision - and how CrowdStrike would have responded at each stage, and why.

Good to Know

The session is highly interactive and conducted in English. 

It is particularly relevant for CISOs, SOC Managers, Incident Response Analysts and Incident Management Teams, but the session is open to all interested participants.

Organisations may register unlimited participants - the exercise works exceptionally well as a team activity.

One day prior to the event, you will receive practical details and preparation instructions for the poll tool.