This guide contails the following sections:
What is a custom scenario?
Experts at Immersive Labs maintain a catalog of Team Sim scenarios that you can use in your exercises and assign to participants.
However, you can also create completely bespoke Team Sim Scenarios with content tailored to your organization: we call these custom scenarios.
| Note: This is only possible, if your Organization has both a Team Sim and Cyber Ranges license. If you’re interested in this, reach out to your Customer Success Manager who’ll be able to provide more information. Find out more about Cyber Ranges here. |
Admins within the Cyber Ranges platform can view the current catalog of scenarios, including all associated documents and tasks here: Team Sim Scenarios Catalog. Browse the current catalog before creating your own content.
How to create a custom scenario
To create a new scenario, navigate to the Team Sim Scenarios tab and select +New Scenario.
You can then optionally choose a scenario from the current catalog to base your custom scenario on. This would pre-populate your scenario with existing content and settings, which you can either amend or remove. Leave this dropdown unpopulated to begin with a blank canvas.
Provide a Name and Description which you can edit later.
Once you've created a new scenario, select it.
You are then presented with three different tabs: Settings, Documents, and Tasks. Edit each, to provide additional details required for an effective Team Sim, outlined in the respective sections below.
Settings
Update the high level details of the Team Sim Scenario:
- First, choose a Theme to classify the scenario as either Offensive or Defensive focused.
- Define a Difficulty Rating for your scenario. This helps Team Sim managers find and assign appropriate exercises for their teams.
- Choose a Template. This is the Range Template that will be deployed for each group that participates in the Team Sim exercise.
- Choose a Participant System from the Range Template. Each participant in the exercise will have their own copy of this system deployed for use in the exercise.
- Define Key Takeaways. Help managers understand the key takeaways participants should have after exercising in this scenario.
Documents
The scenario Documents are crucial to making sure participants have the information they need to be successful within the exercise, and ensuring Team Sim managers can aid in the facilitation of the event.
- Brief: The Brief is shown to both participants and Managers of a Team Sim exercise. It should outline background details about the scenario, and any specific information the participants need in order to effectively participate. Common details in the Brief include:
- Scenario Overview - what are participants being asked to investigate?
- Range Details - specifics about the environment participants are about to investigate.
- Tool Info - what tools have been deployed within the range to leverage during the investigation?
- Debrief: This document typically includes a walkthrough of the specific attack path related to the scenario. It should include enough details for an exercise facilitator to offer meaningful direction to participants for each task. It should also contain solutions for each task. Participants will be able to access this only once the exercise has ended.
- Files: You can include files along with your scenario, however these are not currently supported within the Team Sim product in Immersive Labs.
Tasks
The Tasks defined for each scenario outline what exactly we're asking participants to do throughout the exercise.
If using an existing scenario as a base for your custom scenario, you're able to edit the tasks themselves, change the order they occur in, or remove them from your scenario.
Select the +Add Tasks button at the bottom right to add your own task.
Each task has several components:
- Name: This field will be displayed directly to participants and should describe the specifics of the task. What are we asking participants to do?
- Points: A point value associated with the task. This will allow weighting of certain tasks within the scenario, and could eventually contribute to Immersive Labs Leaderboard points. This is not currently utilized in Team Sim.
- Correct Answers: Tasks can support multiple correct answers. Input each possible correct answer on a separate line in this field.
- MITRE Techniques: All tasks should be mapped to the MITRE Techniques they relate to where possible. We use these MITRE tags to understand performance within an exercise and to recommend other Immersive Labs content to participants.