LABYRINTH CHOLLIMA is a stealthy, persistent adversary built to breach cloud and AI environments. In this hands-on workshop, you’ll use CrowdStrike Falcon® Cloud Security to stop them before their access turns into a breach.

What you’ll do:

• Reduce your attack surface with policy enforcement and automated guardrails
• Detect real-world attack paths targeting cloud and AI infrastructure
• Respond to evasive behaviors as they unfold in runtime
• Automate defenses to eliminate blind spots and harden your environment
• Learn how to streamline security by embedding prevention into DevOps workflows

SCATTERED SPIDER doesn’t break in — they log in. This adversary uses social engineering, session hijacking, and stolen credentials to bypass traditional defenses and blend in alongside legitimate users. In this hands-on workshop, you’ll learn how to detect, defend against, and respond to identity-based threats using CrowdStrike Falcon® Identity Protection across cloud, SaaS, and on-prem environments.

What you’ll do:

• Gain real-time visibility into privilege escalation, misconfigurations, and credential abuse
• See how AI-native detection and response can help you investigate faster and shut down attacks before they spread
• Leverage automated workflows to enhance investigations and respond instantly
• Eliminate blind spots, disrupt identity attacks, and stop SCATTERED SPIDER

CHATTY SPIDER thrives in the noise by weaponizing phishing, social engineering, and fast-moving credential theft to slip past siloed defences. In this hands-on workshop, you’ll use CrowdStrike Falcon® Next-Gen SIEM to detect activity from this modern eCrime adversary and surface threats hidden in plain sight.

What you’ll do:

• Defend with unified telemetry, threat intelligence, AI, UEBA, and integrated case management
• Respond across the entire attack chain by correlating data across endpoint, identity, and cloud.
• Break down silos, cut investigation time, and automate enrichment, triage, and detection workflows
• Outpace CHATTY SPIDER with an AI-native platform built for speed, efficiency, and cross-domain visibility.

Shadow AI and homegrown development of AI agents and workloads create a rapidly expanding attack surface where prompt injection, data leaks, and policy violations can slip past traditional defenses. In this hands-on workshop, you'll use CrowdStrike Falcon® AI Detection and Response (AIDR) to detect and stop real-world AI threats.

What you’ll do:

• Unify AI visibility and capture every prompt by discovering shadow AI across browsers, applications, AI/API gateways, and MCP servers 
• Enforce governance policy and access controls without introducing friction to AI workflows
• Block prompt injection attacks in real time 
• Stop sensitive data leaks before exposure to third-party LLMs or unauthorized users

Test your skills against a real-world threat in this dynamic, hands-on cybersecurity challenge. Using CrowdStrike endpoint security and the AI-native Falcon platform, you'll investigate a simulated intrusion, uncover attacker behavior, and trace potential data theft across compromised systems. From endpoint detection and threat intelligence to AI-powered investigation and response, this lab immerses you in a high-pressure scenario where every decision matters. Lean on Charlotte AI to sharpen your skills, stress-test your instincts, and experience how AI-native security gives modern defenders the upper hand.

Jump into the role of a cloud defender as you uncover a stealthy, evasive adversary: LABYRINTH CHOLLIMA. Track their tactics, expose their objectives, and stop them in their tracks. Leverage the power of CrowdStrike Falcon Cloud Security to dissect attack vectors, trace adversary movements, and leverage agentic AI to speed up cloud investigation and response workflows.

Take command of your organization’s identity perimeter, and face off against adversaries who log in instead of breaking in. Use CrowdStrike Falcon Identity Protection to uncover credential misuse, spot risky logins, and shut down privilege escalation attempts across cloud, SaaS, and on-premises systems. Investigate identity threats as they unfold, eliminate misconfigurations, and compete against fellow defenders to prove your mastery of modern identity security.

Immerse yourself in the frontline experience of defending against a live cyberattack. Uncover a stealthy, evasive adversary — track their tactics, expose their objectives, and stop them in their tracks. Harness the power of CrowdStrike Falcon Next-Gen SIEM and AI-driven investigation tools to dissect attack vectors, trace movements, and accelerate your response.