Conference Description
Key Takeaways
- Virtual Capture the Flag competition focused on Operational Technology and Industrial Control Systems cybersecurity
- Challenges cover forensic analysis, ICS protocol PCAP analysis, PLC program analysis and Windows event log investigation
- Scenarios based on tactics, techniques and procedures used by threat actors targeting OT/ICS environments
- Open to both newcomers and experienced practitioners, with individual or team participation options
About the Event
Capture the Flag 2026 is a virtual competition organised by Dragos, running October 28 to 30, 2026. The 48-hour challenge window allows participants to join at any time during the event. The competition is entirely web-based, enabling global participation without travel requirements. Competitors may use tools such as Kali Linux and SANS SIFT Workstation within a virtual machine environment.
Technical Challenge Areas
The competition presents defensive and forensic challenges drawn from Dragos’s experience defending industrial infrastructure. Participants work through scenarios involving phishing email analysis, ICS protocol PCAP analysis, Windows event log examination, digital forensic artifact and memory image analysis, PLC program and logic file review, and engineering and network diagram interpretation.
Who Should Attend
The event targets OT and ICS cybersecurity professionals, security analysts, incident responders and forensic investigators. IT/OT security teams working in critical infrastructure or industrial environments will find the challenges relevant to their operational responsibilities. The competition accommodates varying skill levels, making it suitable for practitioners building foundational OT security capabilities as well as those with established expertise seeking to test their skills against realistic threat scenarios.