We don’t know what we don’t know. For cyber trainees, this mantra holds especially true as the only way to find out what you don’t know about mitigating cybersecurity attacks is to experience, discover, and learn. The first two phases are handled by the rich library of real-world attack scenarios built in to Cyberbit Range. The learning portion comes during debriefing where constructive feedback is provided. We are proud to announce that following rigorous work with many of our clients, we have created a new debriefing dashboard to help your cyber trainees discover what it is they don’t know and remedy that situation.

The new debriefing dashboard contains multiple sections that help to demystify what occurred during a training exercise. We’ve broken the dashboard into multiple sections to give you an overview of what occurred during your teams training. Most sections in the dashboard are clickable so that you can dive deeper into the information contained there. The dashboard is built to help your cyber trainees understand where there are areas for improvement and areas of focus via effective feedback sessions.

Achievements

Achievements on Cyberbit Range are built based on the NIST Incident Response Framework. The NIST Incident Response Framework outlines methodology to effectively respond to cybersecurity incidents as an effective incident response capability requires substantial planning resources. Our platform is designed to automatically detect goals that are built off the framework to ensure your team is reaching all the milestones required to effectively identify, protect, detect, respond, and recover from cyberattacks.

When you click on the achievements module you are given a breakdown of the goals, including sub-goals, that need to be completed in order to reach that achievement. Additionally, the full point breakdown is included so that your cyber trainees can determine where there are areas of improvement and where they excel. Achievements can be edited from this screen if, upon video review, the instructor determines that a goal was either achieved or not achieved and update accordingly.

Timeline

Every attack, both in real life and consequently on Cyberbit Range, follows an attack timeline or a kill-chain. On your debriefing dashboard, you will see the full timeline of the attack along with timestamps so that you can begin to measure your teams time to response across the entire kill chain. Knowing how quickly your team can achieve specific goals within the NIST Incident Response Framework can help you to determine areas of improvement at a granular level. For example, if you see that your team excels at detecting attacks but struggles with investigation and mitigation, you may want to spend more time on end-to-end attacks in your next training session. However, if they struggle only with forensics, you may want to focus on tooling exercises that will teach them how to better use the tools available to them to determine how an attacker entered your network and what his behaviors were.  The timeline will also include other events (SIEM, hints used, system notes, instructor/evaluator task) that will help cyber trainees determine where their training time needs to be focused.

Help

Cyberbit Range allows trainees to request hints if they find themselves getting stuck at certain points throughout the training scenario. When you click into the hints section you will see which hints cyber trainees needed to take and when the solution brief was downloaded. By knowing which hints were taken and when they needed the solution brief, trainees and instructors can determine what the area of focus will be for their next training session.

As you can see from all the new sections on the debriefing dashboard, every module is built to help determine new points for improvement. In other words, our debriefing dashboard helps you to know what your students or trainees don’t know. We help you to advance their knowledge base and missing skills ensuring that your cybersecurity students, SOC team members, or any other person training on Cyberbit Range is not only trained but effectively done so in a way that works best for their specific needs.