Back to case studies
Intermediate1 h - 1 h 30
Forecasting the threat to a hospital group
Management wants to know “what to expect in the next six months”. Analyze an initial access listing on a forum, leak site trends and your exposure, then produce an actionable strategic assessment.
Briefing
You are the CTI analyst for the Sud-Arvel Hospital Group (6 facilities, 7,800 staff). The board meets in 10 days and wants a 6-month threat assessment to decide on the security budget. Your threat intelligence provider sent you a listing spotted on a cybercrime forum, leak site statistics and a view of your attack surface.
Fictional scenario and data, built on real techniques. .example domains and documentation IP ranges.
Objectives
- Assess an initial access broker listing
- Interpret statistics while accounting for their biases
- Identify the most likely threat scenario
- Use estimative language correctly
- Link the assessment to decisions and indicators
Tools used in real investigations
Veille dark web (prestataire)Sites de fuite ransomware (ransomware.live)Shodan / scan de surface d’attaqueRapports ANSSI / ENISAÉchelle ICD 203
100% Free
Ready to put it into practice?
CyberXTEL is our free platform to train hands-on: certifications, CTFs and a dedicated cyber awareness space.