The NCSC are giving away free malware simulators

The NCSC’s Exercise in a Box has a simulator that allows you to mimic a common malware command and control technique. The simulator is just one of several exercises that make up the “Exercise in a Box” that can be downloaded and used for free from the NCSC. The majority of the scenarios are conducted in a tabletop format but this simulator now lets these exercises test technological security controls.

This means you now have a free tool to test the actual performance of your security team in responding to an incident. This is good for organisations with well established teams conducting threat hunting. It also gives organisations with more immature cyber security programmes a clear target to aim for. And it’s great for team building!

Most people are aware that anti-virus can help detect and prevent malware. Unfortunately many anti-virus products can only detect malware that is known to the security industry. This makes it challenging to detect and is one reason why complementary approaches, such as the ones you’ll be forced to do in the NCSC exercise, are so important.

Here’s how it works. You first need to register for an account with the NCSC “Exercise in a box”. Google “Exercise in a box” and select the NCSC page. After you’ve completed the registration and logged in you can choose what type of exercise you…