Cyber Risks · Cisco Talos

How the new Talos IR Cyber Range can prepare your employees for a cyber attack

Summary: Cisco Talos Incident Response built a three-day Cyber Range training exercise that uses a crawl-walk-run method, ending with students responding to a real-world attack scenario where they must brief stakeholders, identify a root cause, and brief leadership as a team. The range runs on a self-contained network infrastructure brought onsite, uses real-world adversary TTPs against production operating system targets, and mixes open-source tools with a focus on incident response methodology rather than vendor-specific technology.

What's compelling: Talos frames the core problem as muscle memory: sending one or two analysts to offsite training drains budgets and leaves little time to transfer knowledge back to colleagues, so the skills that matter during an incident stay concentrated in a few people. The capstone asks students to answer calls from the CEO and brief leadership while working the evidence, which is the part of response that technical drills alone do not rehearse.

Read the original at Cisco Talos ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026