Skip to content

Buy this video to unlock the full lesson.

Buy to unlock the full lesson

Incident ResponseAdvanced

Ransomware Tabletop: Leading the First 24 Hours

Run a ransomware tabletop for leadership: the first call, containment decisions, legal and comms, and the after-action report.

This scenario follows one realistic day on the job. You will see the request that lands, the tools you open, the problem, the fix, and how to explain the work in an interview. Buy once and keep lifetime access.

What you will learn

  • Walk the scenario from the first ticket to the final write-up
  • Use the same tools and templates practitioners open on the job
  • Document evidence the way auditors and leads expect to see it
  • Explain the work in STAR-style interview answers
  • Spot the common mistakes that slow new hires down
  • Leave with reusable job aids you can take into the role

Who this video is for

  • Career changers preparing for their first cybersecurity interview
  • Analysts who want hands-on practice beyond slide-deck courses
  • Students who need realistic examples for labs and portfolios
  • Hiring managers looking for a shared language with candidates

Curriculum

6 sections, 12 lessons, 44m

The day begins
  • The day begins03:00
  • The day begins checklist1.2 MB
The tools on the job
  • The tools on the job06:00
  • The tools on the job checklist1.2 MB
The problem
  • The problem05:00
  • The problem checklist1.2 MB
How it's done
  • How it's done10:00
  • How it's done checklist1.2 MB
Speak like an expert
  • Speak like an expert05:00
  • Speak like an expert checklist1.2 MB
Job aids
  • Job aids02:00
  • Job aids checklist1.2 MB

Tools you'll see

  • SIEM
  • GRC platforms
  • Ticketing
  • eMASS-style ATO workflows
  • AWS
  • Azure
  • Microsoft 365

More scenarios

Start with a free scenario

Every domain has at least one free video, so you can try the format before you buy.

Watch free previewBrowse videos