Case studies that offers a collection of real-life cases from the Standoff Cyberbattle

Case studies that offers a collection of real-life cases from the Standoff Cyberbattle.
You can investigate incidents at your own pace to better understand how to detect and respond to cyberthreats and apply this experience later at work.


# Getting started
1.	If you don't have an account yet, [register on the Standoff 365 Platform](https://auth.standoff365.com/en-US/account/registration/).
2.	Read the [step-by-step instructions](https://help.standoff365.com/en-US/8731384971/portal) on how to set up a connection.
3.	Go to Workspace → [Access and resources](https://range.standoff365.com/battle/16/?section=report&tab=accessAndResources), and download a VPN config file.
❗️Each cyberrange has its own unique VPN configuration. For correct operation, it is necessary to download a separate configuration file for each cyberrange through this access page. If you try to use the configuration file of another cyberrange, the system will deny access.


# Completing tasks
You can find answers to all tasks in Positive Technologies security tools, which store logs and artifacts from the Standoff Cyberbattle.
If you don't have any experience with Positive Technologies products, read the following materials:
*	 [Quick Start Guide](https://help.standoff365.com/en-US/9708755211/portal)
*   [Official Positive Technologies documents](https://help.ptsecurity.com/en-US/projects)

Please note:
• To connect to MaxPatrol SIEM, select the **LDAP** tab in the authorization window.
• For authorization in PT AF, use the **SSO** tab.
• The security tools contain logs and artifacts from the Standoff Cyberbattle that took place in November 2022. To display the data, use filters by period.
• Don't forget to turn on VPN to complete tasks and work with security tools.

# Getting support
If you encounter technical difficulties or have any questions about the Standoff Cyberbones, write to our [Telegram bot](https://t.me/stf_def_support_bot).

defend

Case studies

Submit answers to the tasks below. The number of attempts is unlimited.

City Housing & Utilities specializes in providing communal and public services in State F. The company maintains street lighting, CCTV systems, digital billboards, and public transport while also managing shopping and business centers, parking lots, a multifunctional public service center, and information desks. In addition, it equips residential apartments with IoT devices and connects them to the city's broadcasting network.

Cyberattacks on the company could affect people in the city significantly, leaving them without online pharmacy orders, street lighting, and access to public services, or even locking them in their apartments.

Defender results