Times: 9:00 AM to 1:00 PM
Exercise Title: Cyber Spring
Exercise Scenario: Malicious cyber actors have developed a computer worm which has been dispersed widely via the Internet and has escaped early detection. This worm is a zero day exploit targeting Windows operating system computers and is set to activate on Earth Day. As part of the local response, Clark County ARES/RACES will be setting up portable data communications stations at critical locations around the county using Orange Kits and personal equipment. Because of COVID-19 precautions, response locations will only be outside of served-agency and other venues.
Operating Aid Document: All members should click here to download the Tab 6 Document, then print and insert it into your Operating Aid before the exercise.
Ground Truth:
1.
Infected systems (unavailable for exercise play):
Winlink CMS (Content Message Server) systems, Windows computers which have been connected to the Internet at any time since March 19, 2021.
2.
Uninfected systems (available for exercise play):
Windows computers isolated from the Internet and those reinstalled after the worm hit, non-Windows systems (Mac, Linux).
3.
Even though some computers are not affected, there are few uninfected systems left on the Internet which can communicate with each other.
4.
Communications capabilities available to uninfected computers include Winlink Peer-to-Peer, Packet, and NBEMS.