Flag The Hack is a unique purple team exercise in which participants, working together in groups, are responsible for detecting cyber attacks carried out by experienced Fortinet red team members. This detection process is conducted “just like in real life” under time pressure. What steps do you take, and how do you ensure that your company doesn’t end up in the news?

The attack scenarios that are simulated are based on Fortinet’s own global forensic analysis work. These attacks are performed on typical enterprise infrastructures secured with modern and well-configured security tools, such as EDR, SIEM, and SOAR.

The participants are experienced security professionals, ensuring a high level of expertise and knowledge sharing in the areas of SOC and incident response. Each team will be guided by an experienced Fortinet engineer.

Collaboration is not based on companies but on skills. The teams will compete in a friendly manner, with scores based on the actions they take. All of this will be tracked live on screens in the room.

Participants are requested to bring their own laptop and power adapter.

The presentations and the challenge will be in English.

This is an event for a selected audience. You should have knowledge of SIEM and SOAR tools, log analysis, correlation, and incident response procedures. Experience with security alerts and events in host-based security controls and endpoint detection and response (EDR) tools is required. You should be able to analyze and identify potential security incidents and understand the MITRE ATT&CK framework.