It Just Got Real at Stanford! Tabletop Exercise to Live Response

Tuesday, May 14 | 4:00PM–5:00PM CT | Montreux, Second Floor Event Centre
Session Type: Breakout Session
Delivery Format: Interactive Presentation
It's time to take your tabletop exercise to the next level and make it a live response exercise. We recently created an incident based on real-world cyberthreats that generated actual artifacts in our detection tools. We brought in 20 people from our ISO and IT orgs to investigate what happened by leveraging the actual tools we use in real incident response. Learn how to level up your teams by running them through analysis of real incidents, where everyone brings their own unique skills to bear on the challenge and has fun doing it.

Outcomes: Plan and create a hands-on live response exercise * Teach your ISO team to use existing tools and how to stay focused on objectives * Learn how to use the kill chain to guide your investigation


  • stacy Lee

    Security Operations, Stanford University
  • Jeremy Tavan

    Information Security Systems Specialist, Stanford University

Resources & Downloads

  • It Just Got Real at Stanford Tabletop Exercise to Live Response

    Updated on 11/26/2019