T3SF: Technical Tabletop Exercises Simulation Framework

by do son ·

orchestration of events

T3SF – Technical Tabletop Exercises Simulation Framework

T3SF is a framework that offers a modular structure for the orchestration of events based on a master scenario events list (MSEL) together with a set of rules defined for each exercise (optional) and a configuration that allows defining the parameters of the corresponding platform. The main module performs the communication with the specific module (Discord, Slack, Telegram, etc.) that allows the events to present the events in the input channels as injects for each platform. In addition, the framework supports different use cases: “single organization, multiple areas”, “multiple organization, single area” and “multiple organization, multiple areas”.

Schematic

Supported platforms

  • Discord
    • Start / Resume functions for incidents.
    • Incidents can have a picture attached and also the profile picture from the sender.
    • Automatic regular expression to match players and channels.
    • Core functionalities such as time difference, ping command and injects fetcher.
  • Slack
    • Start / Resume functions for incidents.
    • Incidents can have a picture attached and also the profile picture from the sender.
    • Automatic regular expression to match players and channels.
    • Core functionalities such as time difference, ping command and injects fetcher.
  • Telegram
    • Start / Resume functions for incidents.
    • Incidents are only capable to have an attached picture, no profile picture from the sender.
    • Manual Inbox fetcher with the command !add, due to the lack of options from Telegram.
    • Core functionalities such as time difference, ping command and injects fetcher.
  • WhatsApp
    • Start / Resume functions for incidents.
    • Incidents are only capable to have an attached picture, no profile picture from the sender.
    • Manual Inbox fetcher with the command !add, due to the lack of options from WhatsApp.
    • Core functionalities such as time difference, ping command and injects fetcher.

Install & Use

Copyright (C) 2023 Base4Security

Tags: orchestration of events