Cyber Training for Municipalities > Municipal Cyber Range
Catalyst Municipal Cyber Range Workshops
The Catalyst Municipal Cyber Range Workshops are cyber range sessions led by an experienced cybersecurity trainer. Learners will be walked through key cybersecurity concepts, with discussion centered around the municipal context, while getting hands-on experience in the Catalyst Cyber Range.
Target Audience: This program is for municipal employees across Canada, including IT professionals and junior cyber professionals. We can accommodate a maximum of 20 participants.
Why Choose the Catalyst Cyber Range
This hands-on environment provides a safe space for your team to build technical skills without the risk of a real threat. It enables you to:
- Think like an attacker to proactively identify weaknesses in your systems and strengthen your defenses.
- Gain practical experience using professional-grade tools to respond to and contain a cyberattack.
- Prepare for a real attack by practicing incident response in a realistic, risk-free setting.
Sessions
Incident Response: Web Exploitation and Detection
- Date: Tuesday, November 17
- Time: 1:00 – 4:00 PM
In this exercise, the attacker exploits a vulnerable WordPress service: validating a stored XSS, hijacking an administrator session, and using that access to create persistence and deploy a remote backdoor. The defender will use Wazuh SIEM features to check alerts, detect the attack and remove the threat.
Cybersecurity Essentials B
- Date: Tuesday, November 24
- Time: 1:00 – 4:00 PM
This scenario builds upon foundational red team concepts and introduces participants to post-exploitation and forensics techniques. Learners begin by analyzing a Windows memory image using Volatility to uncover artifacts such as running processes and downloaded payloads. The scenario progresses to an AS-REP Roasting attack, where participants enumerate Active Directory users and crack password hashes. With those credentials, they gain shell access to a Domain Controller, run privilege escalation and credential dumping tools, and investigate sensitive data. Additional tasks include reviewing PCAP files in Wireshark to detect file exfiltration and executing automated adversary emulation using Caldera. This scenario bridges red and blue team workflows, offering a comprehensive view of modern attacker behavior.