Part two finished with our defenders heading in the right direction to find the simulated infection.  They'll have used a combination of tools in order to get this far, likely including firewall and network logs.  As a reminder, for this exercise there was a simulation running that reached out to

The time has come to run your wargame, let's look at what happens on the day itself.

Cyber exercising is important for checking how a team responds to an incident.