Three hands-on simulators built for the full-day class. P.S. Cafe was breached through phishing — so these put you in the seat: spot the phish, clean up the risky files, and watch how the attacks actually work. Everything runs in your browser. No real systems, no real data.
A real-looking Outlook inbox with 5 F&B phishing emails hidden among genuine mail. Read each one, then Report Phishing. Get the Domain-Analysis breakdown and a scored debrief.
A back-office desktop scattered with files — a .pdf.exe in disguise, plaintext passwords, loose customer & staff data. Inspect each and flag what shouldn’t be there.
See attacks from the other side: brute-forcing a weak password (and how MFA stops it), a SQL-injection login bypass, and a phishing clone with live URL analysis.
README.md). Pair with the facilitator run-of-show and the afternoon exercise guides.