About 50 participants from 12 countries took part in the multinational cyber exercise on CSIRT and Law Enforcement Cooperation, organized by the Council of Europe in KaKheti, Georgia, Oct. 24-27, 2023.

The exercise brought together representatives of law enforcement agencies, attorney general’s offices, and national CERTs/CSIRTs from the Eastern Partnership regions, the Western Balkans, and Turkey, who were confronted with a realistic scenario of a cyber attack by a state actor against the SCADA systems of the energy supplier of an imaginary country

The objectives of the exercise were threefold:
– Strengthen capabilities to detect and identify cybersecurity incidents and potential cyber crimes by conducting initial mitigation work and providing attribution;
– Increase knowledge and skills for applying OSINT, analyzing malware and conducting digital forensics;
– Encourage and promote better cooperation between national CERTs and law enforcement agencies.
Cyber 4.0 collaborated with the Council of Europe (CyberEast and iProceeds-2 projects) and supported the exercise through:
– The creation of technical artifacts that were used by the participants to collect and analyze electronic evidence relevant to the case and advance the investigation to the final (simulated) arrest of the perpetrators;
– On-site facilitation of the exercise, coordinating one of the groups involved in the investigation of the case.

Cyber 4.0’s contribution to the exercise was made possible by the support of Leonardo, which produced the artifacts used during the investigation activities and also made available its Cyber Trainer and Cyber Range platforms

The countries involved, listed in alphabetical order: Albania, Armenia, Azerbaijan, Bosnia I Herzegovina, Georgia, Kosovo*, Moldova, Montenegro, North Macedonia, Serbia, Turkey and Ukraine.

_______________________________________________

Cyber 4.0 partners with the Council of Europe to support a multi-national cyber exercise on CSIRT-LEA cooperation

Some 50 participants from 12 countries attended the multi-national cyber exercise on CSIRT-LEA cooperation, organized by the Council of Europe in KaKheti, Georgia, on October 24-27, 2023.

The exercise put together representatives from police authorities, general prosecutors’ offices and national CERTs/ CSIRTs of Eastern Partnership, Western Balkan and Turkey regions, who were confronted with a realistic scenario of a state-sponsored cyber attack against the SCADA systems of the energy provider of a fictitious country.

The goals of the exercise were threefold:

  • Strengthen capabilities on detection and identification of cyber security incidents and potential cybercrimes, conducting initial mitigation work and providing attribution;
  • Increase knowledge and skills for the application of OSINT, the analysis of malware and the conduction of digital forensics;
  • To encourage and promote better cooperation between national CERTs and LEAs.

Cyber 4.0 partnered with the Council of Europe (CyberEast and iProceeds-2 Projects) and supported the exercise through:

  • The realization of the technical artifacts that were used by the participants to collect and analyze the electronic evidences relevant to the case and advance in the investigation to get to the final (simulated) arrest of the culprits;
  • The facilitation on site of the exercise, by coordinating one of the groups involved in the investigation of the case.

Both streams of activities were possible thanks to the support of Leonardo, who worked to produce the artifacts needed for the simulated investigation, also making available their Cyber Trainer and Cyber Range platforms.

Countries that were involved, listed in alphabetical order: Albania, Armenia, Azerbaijan, Bosnia I Herzegovina, Georgia, Kosovo*, Moldova, Montenegro, North Macedonia, Serbia, Turkey and Ukraine.