Case studies that offers a collection of real-life cases from the Standoff Cyberbattle

Case studies that offers a collection of real-life cases from the Standoff Cyberbattle.
You can investigate incidents at your own pace to better understand how to detect and respond to cyberthreats and apply this experience later at work.


# Getting started
1.	If you don't have an account yet, [register on the Standoff 365 Platform](https://auth.standoff365.com/en-US/account/registration/).
2.	Read the [step-by-step instructions](https://help.standoff365.com/en-US/8731134731/portal) on how to set up a connection.
3.	Go to Workspace → [Access and resources](https://range.standoff365.com/battle/16/?section=report&tab=accessAndResources), and download a VPN config file.
❗️Each cyberrange has its own unique VPN configuration. For correct operation, it is necessary to download a separate configuration file for each cyberrange through this access page. If you try to use the configuration file of another cyberrange, the system will deny access.


# Completing tasks
You can find answers to all tasks in Positive Technologies security tools, which store logs and artifacts from the Standoff Cyberbattle.
If you don't have any experience with Positive Technologies products, read the following materials:
*	 [Quick Start Guide](https://help.standoff365.com/en-US/9708758667/portal)
*   [Official Positive Technologies documents](https://help.ptsecurity.com/en-US/projects)

Please note:
• To connect to MaxPatrol SIEM, select the **LDAP** tab in the authorization window.
• For authorization in PT AF, use the **SSO** tab.
• The security tools contain logs and artifacts from the Standoff Cyberbattle that took place in November 2022. To display the data, use filters by period.
• Don't forget to turn on VPN to complete tasks and work with security tools.

# Getting support
If you encounter technical difficulties or have any questions about the Standoff Cyberbones, write to our [Telegram bot](https://t.me/stf_def_support_bot).

cyberbones

Case studies

Submit answers to the tasks below. The number of attempts is unlimited.

Bankoff — the leading digital bank of the State F. Currency operations, instant payments, secure card processing. But the system has been hacked — now you must investigate the breach, uncover vulnerabilities, and protect clients' assets.

Banking (2022)

City Housing & Utilities specializes in providing communal and public services in State F. The company maintains street lighting, CCTV systems, digital billboards, and public transport while also managing shopping and business centers, parking lots, a multifunctional public service center, and information desks. In addition, it equips residential apartments with IoT devices and connects them to the city's broadcasting network.

Cyberattacks on the company could affect people in the city significantly, leaving them without online pharmacy orders, street lighting, and access to public services, or even locking them in their apartments.

City Housing & Utilities (2022)

Explore the most interesting incidents detected during the Standoff Cyberbattle 2022

In State F, the oil and gas company Tube is rapidly expanding. It owns assets related to oil extraction, refining, storage, transportation, and sales of petroleum products. Among its holdings is an automated gas distribution station (AGDS) that supplies natural gas to a thermal power plant (TPP) and City. The station’s operations are critical for stable heating and hot water supply in the capital’s residential areas, as well as providing electricity to most regions powered by the TPP.
To boost fossil fuel production, Tube is actively expanding its resource base through geological exploration and new acquisitions. State F holds about 10% of the world’s oil reserves, enabling resource exports.

Tube (2022)

Heavy Logistics manages transport infrastructure and operates the traffic light system in State F. The company is also in charge of airport customs, a temporary storage warehouse, an airport express train station, and an automated parking facility for airport visitors and passengers.

State F will face catastrophic consequences if hackers break into Heavy Logistics systems and seize control. For example, they could cause a passenger information system failure or flight delays, disrupt traffic, or cause trains moving on the same track to crash.

Defender results