Cyber RangeRubrikData Protection & Cyber RecoveryData Center
Cyber Range

🎤 MicDrop - Rubrik CTF

Event Overview

The MicDrop Capture the Flag (CTF) event will highlight Rubrik Security Cloud's (RSC) key features, helping customers understand how RSC provides cyber resiliency for their organizations. Features highlighted include: ✅ Data Protection – Back up and recover files, databases, and VMs to ensure data availability and ransomware resilience. ✅ Data Threat Analytics – Leverage IOCs, YARA rules, and hashes to detect and analyze potential threats. ✅ Cyber Recovery – Utilize automated, network-isolated recovery methods to restore operations securely and perform forensic analysis. ✅ Data Security Posture – Identify and monitor sensitive data exposure to improve security and compliance. ✅ Ruby - Rubrik's new generative AI assistant, your on-demand RSC expert This hands-on experience will provide insight into how these tools work together to protect, detect, and recover from cyber threats by demonstrating their value in an engaging CTF format using a real-world ransomware scenario.

What to expect

Threat intel indicates that the APT known as the SpiceWorm team is targeting record labels with advanced ransomware campaigns. As a member of SAVE, you have been brought in to help Caladan Records prepare/detect/contain/recover their environment from imminent attack using Rubrik Security Cloud and master cyber resiliency. Within the game, specific Blue Team tools have been provided to help you successfully diagnose any malicious activity and vulnerabilities you may encounter.
  • Rubrik Security Cloud
  • Wireshark
  • Ghidra
  • Zenmap
  • Burp Suite

Goals and Objectives

Teams will be dropped into a real-world ransomware scenario where they must: ✅Prepare the environment by establishing proper application recovery plans. ✅Detect & Analyze the attack using threat hunting and incident response tools. ✅Contain, Eradicate & Recover with Rubrik’s Cyber Resiliency platform. ✅Report post-incident findings to the board.

Who should attend?

Security Operations Center (SOC) Analysts & Threat Hunters, Incident Response (IR) & Cyber Recovery Teams, IT Infrastructure & Backup Administrators, CISOs & IT Security Leadership We want players to feel confident, even if they don't have extensive knowledge around RSC so we've introduced Ruby. Ruby is Rubrik’s new generative AI assistant, designed to guide teams through cyber detection and recovery. While playing MicDrop, Ruby can act as your on-demand Rubrik expert, helping you understand how to navigate threat detections, perform targeted threat hunts, and restore services using Rubrik Security Cloud. If your team lacks deep Rubrik experience, Ruby can help bridge the gap. Whether you’re threat hunting for indicators of compromise or recovering critical data and restoring services, Ruby can help optimize your approach and accelerate your response.

Related content

Cyber Range - Initiation

Initiation is a Capture the Flag (CTF) lab meant to introduce you to the WWT Cyber Range platform and serve as a tutorial for future events. You will be introduced to the features and functionality as well as provided tips for success during future WWT Cyber Range CTFs. This lab will also allow you to test your access using the same platform we use for our live CTF events so you can make sure you will be ready on game day.
Advanced Configuration Lab
1791 launches

Rubrik Cyber Recovery

With cyberattacks increasing in frequency and sophistication, organizations face new challenges in protecting data. Legacy backup tools are more vulnerable than ever as attackers increasingly target backup data as part of their attacks. With Rubrik's comprehensive, modern solution to secure your data wherever it lives, organizations can be confident in their ability to recover from an attack while proactively gaining insight into threats and sensitive data.
Learning Path

Rubrik Data Protection

For those with a foundational understanding of Rubrik, this Learning Path will explore how Rubrik protects specific workloads such as Kubernetes, M365, and Microsoft Azure. This Learning Path also introduces Rubrik's Continuous Data Protection and details how Rubrik uses SLA Domains to simplify data protection.
Learning Path