PROSA & CyberSkills Hacking Evening with SagaLabs: Operation Crimson Lynx

This special edition of PROSA & CyberSkills Hacking Evening features SagaLabs, which provides scenario-based cybersecurity training inspired by military methods. Their approach is built around hands-on exercises and a “Train as You Fight” philosophy that prepares participants to respond to realistic cyber incidents.

In Operation Crimson Lynx, participants work through a hands-on ransomware incident response scenario involving a fictional Danish company hit by a ransomware attack. The goal is to understand how the attackers gained access, what actions they performed, what data was stolen, and how the organization should respond.

You will work with

• Velociraptor for threat hunting and forensic analysis
• Elastic SIEM to investigate security events
• MITRE ATT&CK to map attacker behavior
• Building a timeline of the attack
• Identifying compromised systems and stolen data
• Creating a debrief with findings and recommendations