Check Point x Cyberbit's SOCathon (Mar 05, 2020)

How it Works

A SOCathon is a one-day event that places cybersecurity teams in Cyberbit Range, the world's leading hyper realistic cybersecurity training platform, where they will respond to simulated cyberattacks.

The event is split into 2 tracks:
  • Practitioner track (9:30am - 4:30pm): Security practitioners will be tasked with responding to a simulated cyberattack. The will use market-leading security products and tools to detect, investigate, and mitigate the attack in progess. A team arriving from the same organization may practice as a team.
  • Executive track (1:30pm - 4:30pm) Lunch start at 12:30pm: Executives will participate in thought leadership presentations and discussions. Following the discussions, they will join their teams to experience the last 30 minutes of the SOCathon thrill. All participants will then join for a debrief session and awards.
The participants will connect to a cloud based cyber range and will be challenged with two simulated attacks, a mid-level attack, and an advanded, multi-stage attack (worm, Trojan etc.).
  • Teams are evaluated by speed and quality of the response and investigation according to the NIST incident response process/ The winning team will receive a prize.
  • Some of the skills and tools that teams will practice are: Windows forensics, firewall management, network forensics, endpoint security and Sysinternals Suite, process investigation and traffic investigation.
  • In addition to the technical skills, trainees will practice and learn about various aspects of teamwork and communications during an incident response process.
What Should You Bring?
  • You should bring your own laptop. Any Windows, Linux and MacOS laptop will work. Participants will install a thin VPN client before the session to connect to the Cloud Range.


Practitioner Track

Executive Track

09:00 – 09:30am



09:30 – 10:15am

Briefing and introduction


10:30 – 12:00noon

SOCathon exercise 1 –



12:15 – 12:30pm



12:30 – 1:30pm


Executive Luncheon

01:30 – 03:00pm

SOCathon Scenario 2 – Advanced

Thought leadership presentation

03:00 – 03:30pm


Join practitioners for SOCathon

03:45 – 04:30pm

Debrief and awards