Four teams are currently available – red (offense), blue (defense), white (session orchestration) and grey (background traffic/noise). Blue and Red teams have dedicated areas/rooms with machines to allow remote connections to the virtual user clients in simulated network(s). The backbone of the range is constructed with high performance servers which will be used to run simulated target environments, virtual clients for red and blue team activities, and grey team simulation.
For example, a copy of a corporate network in virtual environment can be simulated by the range
Large demonstration screens provide real time feedback of the session currently running. Statistics such as scoring, target network topology, events and triggers will be displayed as the session progresses.
Individual training or team based exercises are available. Chat systems between teams are available to coordinate tasks. White team controls the session using broadcast and personal messages to red team and blue team members. To make the session and environment more realistic, grey team activity is also present in the range. Normal users and background traffic within a network will be simulated to provide usual traffic that would typically exist on the network.
DarkSkope Cyber Range provides a variety of training capabilities for all individuals with varying levels of technical competence ranging from beginner to advanced levels. Additional scenarios can be made available for the use of red/blue team members, incident responders, security/malware analysts and business executives.