{"id":7784,"date":"2022-07-29T17:09:00","date_gmt":"2022-07-29T17:09:00","guid":{"rendered":"https:\/\/news.maryland.gov\/ng\/?p=7784"},"modified":"2022-09-06T17:10:50","modified_gmt":"2022-09-06T17:10:50","slug":"maryland-soldiers-train-with-dod-partners-and-allies-at-cyber-flag-22","status":"publish","type":"post","link":"https:\/\/news.maryland.gov\/ng\/2022\/07\/29\/maryland-soldiers-train-with-dod-partners-and-allies-at-cyber-flag-22\/","title":{"rendered":"Maryland Soldiers train with DoD partners and allies at CYBER FLAG 22"},"content":{"rendered":"\n

Story by Sgt. Thomas Lamb\u00a0<\/h3>\n\n\n\n
\n
\"\"
U.S. Army Lt. Briana Harvey, team lead for CPT 169 during CYBER FLAG 22, assists another soldier with a computer issue at the Laurel Readiness Center, Laurel, MD during CYBER FLAG 22 on Jul. 25, 2022. Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators. (U.S. Army National Guard photo by Sgt. Tom Lamb)<\/figcaption><\/figure>\n<\/figure>\n\n\n\n

LAUREL, Md. – Maryland Army National Guard Soldiers participated in an international cyber event at the Laurel Readiness Center, July 18-29, 2022.<\/p>\n\n\n\n

Members of the 169th Cyber Protection Team honed their skills to identify and respond to malicious online attacks while working with international and interagency partners from Canada, the United Kingdom, the U.S. Department of Energy, U.S. Air Force Cyber Command, and U.S. Coast Guard Cyber Command.<\/p>\n\n\n\n

Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators.<\/p>\n\n\n\n

CPTs provide surge support to U.S. Army Cyber Command when mobilized for federal active duty and support defensive cyberspace operations like the ones simulated in the exercise.<\/p>\n\n\n\n

\u201c[During the exercise] we’re helping a system owner perform defensive actions,\u201d said U.S. Army 1st Lt. Briana Harvey, the team lead for CPT 169. \u201cWhich include hunt, clear, enable hardening and assessing the system owners network. We are there to provide recommendations for them based on the scenario and injects that we’re seeing from CYBERCOM.\u201d<\/p>\n\n\n\n

\n
\"\"
Members of Cyber Protection Team 169 hunt for malicious activity on their network at the Laurel Readiness Center, Laurel, MD during CYBER FLAG 22 on Jul. 25, 2022. Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators. (U.S. Army National Guard photo by Sgt. Tom Lamb)<\/figcaption><\/figure>\n<\/figure>\n\n\n\n

Incident response plans are integral to a Cyber Protection Team\u2019s operation. They give every member of a team a specific job to quickly and safely mitigate a cyberattack. The ability to hunt for the malware, clear it out of the system, harden the system, and assess after the fact are core parts of their operation.<\/p>\n\n\n\n

For Cyber Flag 22, Chief Warrant Officer 3 Keith Roberson, a security operations center engineer, was working in the hunt section.<\/p>\n\n\n\n

\u201cWhen we get alerts or a bunch of false positives, I tune up our [network environment] so we can eliminate that noise,\u201d said Roberson. \u201cThat makes it easier for our guys to see the bad things that are happening in our network.\u201d<\/p>\n\n\n\n

The more experienced Robinson provided support and guidance for newer members of the team like Spc. Joe Wolf-Pitts.<\/p>\n\n\n\n

\u201cExercises like this, where you really get to see traffic in the wild, like internet traffic; bad traffic and good traffic are really helpful,\u201d said Wolf-Pitts. \u201cI can examine it without the fear that it’s actually really hurting something.\u201d<\/p>\n\n\n\n

Exercises like Cyber Flag are important because they are a safe place to learn, which allows for faster response times in the event of a real incident.<\/p>\n\n\n\n

\n
\"\"
U.S. Army 1st Lt. Briana Harvey, team lead for CPT 169, Maryland Army National Guard, during CYBER FLAG 22, monitors network activity at the Laurel Readiness Center in Laurel, Md., during CYBER FLAG 22, July 25, 2022. Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators. (U.S. Army National Guard photo by Sgt. Tom Lamb)<\/figcaption><\/figure>\n<\/figure>\n\n\n\n

A Soldier in the hunt section is the first line of defense. They monitor network activity to look for potentially dangerous information. After finding malicious code a second team comes in to clear it off the network. Enabling hardening is the third step in incident response. Hardening is the process of writing new rules for your network to stop malicious activity from happening in the future.<\/p>\n\n\n\n

\u201cDownloading executable files from the internet is not authorized on our network,\u201d said Roberson. \u201cI’ll write an alert that will trigger on that saying that you downloaded this. So we need to go and investigate.\u201d<\/p>\n\n\n\n

Finally, the cyber protection team can assess how effective their measures were. In this step the CPT can circle back and figure out how to improve in the future. They can assess the situation making sure that the adversary can’t use that same route to get back in and drop those kinds of persistence or malicious cyber activity said Roberson.<\/p>\n\n\n\n

Citizens-Soldiers supporting CPT missions are uniquely ready because many work within the information technology career field or have cutting-edge cyber defense capabilities from their civilian jobs. Still, there is always something to learn when you work together with other partners.<\/p>\n\n\n\n

\u201cThis is important because it’s giving us a chance to get hands-on keyboard with a network against a live adversary,\u201d said Harvey. \u201cWe’re actually getting time to test out our tactics, techniques and procedures, develop our SOP, participate in the exercise and get ready for the potential real world incident responses.\u201d<\/p>\n\n\n\n

More than 275 cyber professionals from across the Defense Department, U.S. federal agencies, and allied nations competed against a robust and dynamic opposing forces comprised of over 60 Red Team operators from the United Kingdom and United States in Cyber Flag 22. The defensive cyber exercise, which provides realistic \u201chands on-keyboard training\u201d against the activities of malicious cyber actors, is designed to enhance readiness and interoperability within the participating teams.<\/p>\n\n\n\n

\n
\"\"
Members of Cyber Protection Team 169 hunt for malicious activity on their network at the Laurel Readiness Center, Laurel, MD during CYBER FLAG 22 on Jul. 25, 2022. Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators. (U.S. Army National Guard photo by Sgt. Tom Lamb)<\/figcaption><\/figure>\n<\/figure>\n","protected":false},"excerpt":{"rendered":"

LAUREL, Md. – Maryland Army National Guard Soldiers participated in an international cyber event at the Laurel Readiness Center, July 18-29, <\/p>\n

Members of the 169th Cyber Protection Team honed their skills to identify and respond to malicious online attacks while working with international and interagency partners from Canada, the United Kingdom, the U.S. Department of Energy, U.S. Air Force Cyber Command, and U.S. Coast Guard Cyber Command.<\/p>\n

<\/p>\n

<\/p>\n

Cyber Flag 22 is an annual U.S. Cyber Command training event that is designed to strengthen partnerships, improve the defensive skills, and enhance the readiness and collaboration of the participating cyber operators.<\/p>\n","protected":false},"author":160,"featured_media":7746,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[2],"tags":[],"class_list":["post-7784","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/posts\/7784","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/users\/160"}],"replies":[{"embeddable":true,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/comments?post=7784"}],"version-history":[{"count":2,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/posts\/7784\/revisions"}],"predecessor-version":[{"id":7799,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/posts\/7784\/revisions\/7799"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/media\/7746"}],"wp:attachment":[{"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/media?parent=7784"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/categories?post=7784"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.maryland.gov\/ng\/wp-json\/wp\/v2\/tags?post=7784"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}