We coined this CTF style event Periwinkle village.  We wanted to provide a purple team experience with realistic items you can take back to your corporation.   The CTF environment will have around 100 questions.

On the 14th (Free Training Day) will be limited to the non-lab '101' and '201' questions part of the CTF.  These are cyber security, sysadmin, web app, and network admin general questions.

On the 15th the day of the conference, we will grant teams access to an Arkime instance to figure out what type of attacks performed and other supplementing information to answer the '301' and '401' questions.

The Arkime instance is a full packet capture and additionally will have Suricata IDS events.  You will perform incident response and break down the attack methods.  We will be doing a full write up after the conference to make it easier for other people provide this type of event.  The write up will be modular to encourage use of their own flavor of tools and methods.