Aegis CART
Continuous Automated Response Teaming • Learning Feedback Loops
Operation IRONCLAD — NATO Eastern Flank
Simulated Russian GRU-attributed APT campaign targeting NATO logistics coordination systems across Poland and Baltic states. Attack chain: spear-phishing → credential theft → lateral movement → SCADA access.
SANDSTORM — Critical Energy Infrastructure
Replay of Iranian IRGC-affiliated Sandstorm TTPs against European energy grid operators. Focus on ICS/SCADA disruption and data destruction payloads.
GHOST SAHEL — Insider Threat Simulation
Blue team exercise simulating insider threat: malicious analyst with legitimate access exfiltrating sensitive OSINT assessments. Tests DLP, UEBA, and access controls.
TYPHOON CHAIN — Supply Chain APT
Full red/blue/purple exercise simulating Chinese Volt Typhoon-style supply chain compromise targeting managed service provider to achieve persistent access across 12 downstream client environments.