We invite you to join the CrowdStrike Incident Response Team in Europe for the next real time cyber simulation workshop featuring brand-new scenarios. Based on real adversaries actively targeting organisations today, the session offers a realistic view into how fast-moving attacks develop — and how key decisions shape the outcome.

Throughout the exercise, you’ll gain insights into how sophisticated threat actors infiltrate mature environments, escalate their operations and challenge even well-prepared teams.

This workshop is designed to provide practical guidance on how to navigate a real cyber incident — whom to involve, how to prioritise and which early decisions influence the outcome. We focus on sharing frontline experience and actionable insights to help you prepare for scenarios every organisation must be ready to manage.

Choose-Your-Own-Adventure Format

In this interactive format, you take the lead.

At every stage of the simulation, you vote via a poll app provided by us on critical decisions that determine the direction of the incident. Across 5–7 injects, your collective choices influence escalation paths, response options and the remaining time window.

This year’s scenario focuses on a highly sophisticated China-nexus adversary compromising a managed service provider, resulting in downstream customer impact — a threat pattern increasingly seen across Europe.

Benefits of Attending

• Realistic, risk-free training
  Experience a controlled environment that mirrors the pace, ambiguity and pressure of real cyber incidents.
• Decision-making under pressure
  Evaluate signals, prioritise actions and navigate uncertainty as the scenario unfolds.
• Understanding adversary behaviour
  Gain visibility into the tactics and tradecraft used by modern threat groups.
• Collaboration and communication
  Work alongside peers and experience first-hand how coordination impacts containment and recovery.
• Knowledge exchange
  Hear different perspectives and best practices from attendees across      industries.
• Time sensitivity
  See how risk levels shift with each decision — and how CrowdStrike would have responded at each stage, and why.

Good to Know

• The session is highly interactive and conducted in English.
• It is particularly relevant for CISOs, SOC Managers, Incident Response Analysts and Incident Management Teams, but the session is open to all interested participants.
• Organisations may register unlimited participants — the exercise works exceptionally well as a team activity.
• One day prior to the event, you will receive practical details and preparation instructions for the poll toll.

We look forward to cyber simulating with you soon.

Your CrowdStrike Team