Backdoors & Breaches, an Incident Response Card Game, from Black Hills Information Security and Active Countermeasures contains 52 unique cards to help you conduct incident response tabletop exercises and learn attack tactics, tools, and methods.
At the start of the game, the Incident Master will create an incident scenario by selecting an Initial Compromise, C2 and Exfil, Persistence, and Pivot and Escalate cards and give a narrative of the incident to the Responders. Responders will have access to a set of four documented Procedures and will begin to take actions to try and investigate and resolve the incident. For every action, the Responder team rolls a d20 with any available advantages or disadvantages to see if they are successful. Successful actions will lead to revealing additional cards in the scenario.
If all of the scenario cards are revealed or if the Responders take 10 rolls without revealing a new card, the game is over. When the game is complete, the team can discuss their successes and failures and apply what they have learned to their real-life incident response program.