How to use these exercises
Each exercise is designed to stand on its own. Pick the scenario that fits your goal, review the facilitator guide, bring the right people into the room, and capture follow-up actions in the hotwash.
- Expected time: most exercises are built for 60–90 minutes
- Best audience: leadership, IT, security, communications, and key service owners
- Goal: better decisions, cleaner escalation, and fewer surprises during real events
KEV Exploitation Tabletop Kit
Practice emergency patching, downtime approval, compensating controls, and leadership decisions when a known exploited vulnerability affects an important system.
- Expected time: 60–90 minutes
- Best for: IT leadership, security, infrastructure owners, executives, communications
- Includes: Spectral Raccoon / APT-1337 threat framing as part of the standard scenario package
Ransomware Tabletop Kit
Practice containment, restoration priorities, continuity, communications, and executive decisions during a ransomware event.
- Expected time: 60–90 minutes
- Best for: IT leadership, security, backup owners, executives, communications, operations
- Includes: optional Spectral Raccoon / APT-1337 flavor for attribution and communications pressure