Backdoors & Breaches: Core Deck
Bring incident response training to life with Backdoors & Breaches, the original cyber security incident response card game from Black Hills Information Security, Antisyphon Training and Active Countermeasures.
Designed as a structured, co-operative tabletop exercise, Backdoors & Breaches helps teams practise investigating realistic attack scenarios in a fast, engaging and repeatable format. One player acts as the Incident Captain, secretly building an attack path, while the Defenders work together to identify what happened using detection cards, discussion, critical thinking and a d20 roll.
The Classic Core Deck includes 52 unique cards representing attacks, detections and injects. Attack cards are grouped into four categories: Initial Compromise, Pivot & Escalate, Persistence, and Command & Control / Exfiltration. By combining cards from each category, teams can create thousands of possible incident scenarios.
Backdoors & Breaches is ideal for:
- Cyber security training sessions
- Blue team and incident response exercises
- SOC team development
- Cyber clubs, classrooms and university courses
- Security meetups, conferences and workshops
- Tabletop exercises with a practical game-based structure
Use it to spark discussion around detection coverage, logging, tooling, response playbooks and real-world security gaps. Sessions can be run as short drills, lunch-and-learn activities, classroom exercises or facilitated team events.
What you’ll need:
- a Backdoors & Breaches Core Deck,
- a d20 or dice app
- at least two players.
The game works particularly well with one Incident Captain and a group of Defenders working together to solve the incident before time runs out.
A brilliant training tool for anyone who wants to make incident response practice more interactive, memorable and fun.
