Module 8 – Cyber Ranges Training and Exercises (NERO)

NERO Module 8 – Cyber Ranges Training and Exercises provides trainees with an intensive, practical introduction to identifying, analysing, and mitigating modern cyber threats through immersive, experiential learning.

The module focuses on hands-on deployment, attack generation visibility, and real-time incident response within virtualised, sandboxed training environments. Through guided exercises and simulated real-world scenarios, trainees learn how to monitor infrastructure networks for malicious activities, observe offensive tactics used by cyber adversaries to breach assets, and implement effective technical countermeasures to protect small and medium-sized enterprises (SMEs).

Registration information

Participants can register for this module through the NERO website where they can gain full access to the training materials and training activities. All required tools and resources are available through the NERO Marketplace.

Topics covered

The training covers a structured set of foundational and practical topics, including:

• Fundamental concepts, current trends, and objectives defining the cybersecurity landscape.

• Prominent European cybersecurity frameworks and compliance regulations.

• Essential pillars of the CIA Triad (Confidentiality, Integrity, Availability) and corporate risk management.

• Profiles of modern threat actors and their attack vectors.

• Technical prevention mechanisms: security policies, secure network design, access control, and patch management.

• Proactive threat detection architectures using Security Information and Event Management (SIEM) systems.

• Real-world incident response planning, crisis management frameworks, and digital forensic analysis.

• Virtualised attack and defence simulation via the Attack Detect React (ADR) Cyber Range.

• Real-time network traffic monitoring and anomaly tracking using the Montimage Monitoring Tool (MMT).

• Phishing indicator identification and email classification training via a dedicated mobile app engine.

These topics are supported by visually engaging slides, video demonstrations, step-by-step documentation, and collaborative group exercises.

Learning approach

The module follows an interactive learning approach that combines:

• Expert-led lectures detailing baseline threat prevention, detection, and reaction methodologies

• Dynamic video walkthroughs demonstrating technical tools, configuration profiles, and screen-captured exercises

• Comprehensive training manuals and step-by-step lab documentation for self-paced reinforcement

• Periodic quizzes, questionnaires, and feedback interviews to track progress and gauge training effectiveness

• Active sandboxed exercises mapping out live attacker, target, and operator dashboard mechanics

Learning outcomes

After completing the module, trainees will be able to:

• Explain fundamental cybersecurity principles and maintain strict compliance with global industry standards

• Identify, track, and mitigate advanced threat vectors including ransomware, malware, and denial-of-service attacks

• Utilise cutting-edge security tools, anomaly detection engines, and SIEM platforms for proactive monitoring

• Construct and execute comprehensive incident response plans during organisational crises

• Categorise and isolate sophisticated social engineering and phishing attempts on mobile communication endpoints

• Leverage simulated virtual cyber ranges to orchestrate defensive counter-strategies against active network exploits

• Support collaborative team frameworks to bolster the shared security posture of their enterprise