Steam news

ThreatGEN: Red vs. Blue news & patch notes

Full Steam announcements and update articles for this title.

ThreatGEN Teamsteam_community_announcementspatchnotes

1385d ago

Version 1.10.4 released quickly after 1.10.3 to provide needed hotfixes. We were also able to add a few more feature improvements. This is expected to be the last minor update before 1.11 ships with some exciting upgrades! Version 1.10.4 Release Notes Fixes • RVB1-1084 Internal Vulnerability Assessment has the requirement of implementing Asset Inventory • RVB1-1083 Internal Penetration Test has a requirement of doing at least one vulnerability assessment beforehand • RVB1-1078 Can't gather forensics on denials • RVB1-1076 Missing space between sentences in "Rogue Device Detected!" notification • RVB1-1071 Condition checkers need to be reinitialized after scenario playback • RVB1-1070 Backing up a compromised asset and restoring it gives more TI for the same compromise • RVB1-898 TTX - Loading a scenario that uses the base maps will cause the game to use that scenario every time the map is selected (incognito-only) • RVB1-602 Some close buttons on BT have red borders Features and Upgrades • RVB1-1086 Increase chance of new vulnerabilities when patching • RVB1-1081 Added visual animation to start screen background, wiki, and notifications dialogues • RVB1-1080 Improved UI visuals (enhanced color vibrancy/saturation) • RVB1-1073 Remove Asset Inventory prereq from any action that uses it • RVB1-1072 TTX - Suppress notifications during scenario playback • RVB1-1067 Persistence research now buffs Install Ransomware and Disruptive Malware • RVB1-1066 BT Vuln assessment accelerates patch availability • RVB1-963 Asset Inventory Updates (can discover rogue device and is multi-playable) • RVB1-962 Rogue Device updates (acts as remote pivot and IDS discoverability lowered) • RVB1-936 TTX Scenario-based notification: Trigger notification when all RT control is removed

ThreatGEN: Red vs. Blue News & Patch Notes | SteamScope

Steam news

ThreatGEN: Red vs. Blue news & patch notes

Full Steam announcements and update articles for this title.

1.10.4 Release Notes

ThreatGEN Teamsteam_community_announcementspatchnotes

1385d ago

1.10.3 Release Notes

ThreatGEN Teamsteam_community_announcementspatchnotes

1387d ago

While we prepare for our big 1.11 release, we have been working diligently on regular fixes and minor upgrades! Version 1.10.3 Release Notes Fixes • RVB1-1037 Typo in "PNL dropped to 25%" notification • RVB1-1034 Malicious USB Created notification text still has the old location listed (as next to the end turn button) • RVB1-1030 SCADA HMI on MFG should have the IP address of the field zone after segmentation • RVB1-1026 ICS Security Monitoring doesn't monitor switches when played before segmentation • RVB1-1024 Password Attack doesn't contribute to 10 hack bonus • RVB1-1022 Weak Password and Default Credentials vulns sometimes show up with the "no patch available yet" state • RVB1-1017 RT AI actions shouldn't know which unknown assets to target • RVB1-1015 AI Crack Ransomware Key action is still targeted • RVB1-1011 Missing localization text in the disconnect message whenever RT leaves online multiplayer games • RVB1-1010 No message about the other player exiting the game is being displayed in online multiplayer games • RVB1-1003 Hire New Staff can't be stacked using the action tree and the action toolbar • RVB1-1002 Physical Security skill not considered for RT change location actions • RVB1-1000 Crack Ransomware Key is targeted, yet it unlocks every locked device on the map if it succeeds • RVB1-998 Vulnerability Assessment, Penetration Test, Internal Vulnerability Assessment and Internal Penetration Test finish successfully in IR mode • RVB1-995 IR mode can be deactivated with disconnected assets if they are disconnected earlier than the Deactivate IR action is used within the same turn • RVB1-988 Need to mute SFX during scenario loading • RVB1-985 Missing click sound effects • RVB1-984 Victory music is played after RT gives up in a singleplayer game • RVB1-979 Fix Budget Defender Milestone • RVB1-909 Old password dialogue pops up when the game can't contact the server (start screen) Features and Upgrades • RVB1-1036 Update scenario scene loading graphics • RVB1-1035 Add PnL and Ransomware notifications to the general levels • RVB1-1023 Turn off passive revenue recovery while in IR mode • RVB1-1020 Account-based game parameters from global-based • RVB1-1012 Add 16:10 Aspect Ratio Support in Game Scene (via “I” and “+” buttons switch) • RVB1-1009 TTX Scenario-specific mission text • RVB1-1008 RT AI Profile: PnL • RVB1-1007 RT AI Profile: Email • RVB1-1006 RT AI Profile: General Social Engineering • RVB1-1005 RT AI Profile: Cyber • RVB1-1004 RT AI Profile: Physical • RVB1-996 Set RT resource cost of End Campaign to 0 • RVB1-994 Enable the Hire New Staff action to be used multiple times within the same turn • RVB1-991 Add controlled assets to restore points • RVB1-990 Hide score during scenarios • RVB1-978 Remove "Outdated Software" Vulnerability • RVB1-977 Make the game start in Network View by default • RVB1-972 Add RT control cleared win condition to scenario dialogue • RVB1-969 Change RT minimum point requirement to 1 • RVB1-935 Allow for notifications to trigger based on PnL value • RVB1-923 Update the "Upgrade Rig" and "Recruit Hackers" actions (resource costs) • RVB1-876 Implement ability to have different exploitation difficulty per vuln • RVB1-858 Show undiscovered vulns in different color at end of game • RVB1-794 Design and implement a better, more human-readable way to display endgame reports (HTML options added) • Wiki updates to descriptions

1.10.2 Release Notes

ThreatGEN Teamsteam_community_announcementspatchnotes

1426d ago

While we prepare for our big 1.11 release, we have been working diligently on regular fixes and minor upgrades! Version 1.10.2 Release Notes Fixes • RVB1-980 Mismatch between win condition in multiplayer games with the Blue Team Damaged Their Own Process win condition • RVB1-976 Turning off Damage ICS Process win condition causes PnL win condition to silently turn off • RVB1-959 ICS Security Monitoring is marked as already implemented when IR is activated a turn after it is queued, despite the fact that the action fails • RVB1-956 Host scanning from the onsite pivot reveals hosts previously accessible to the rogue device once it is removed • RVB1-954 BT can replace compromised assets that they don't know are compromised yet • RVB1-953 "Prepare Covert Attack" action entry English error • RVB1-951 Actions that cost money count as spent cash if the action is cancelled afterwards • RVB1-950 Unable to enter IR mode with only a ransomware lock being discovered • RVB1-947 ICS Security Monitoring is successful when finished in IR mode • RVB1-946 Exfiltrate Data should not be available on IDS devices • RVB1-944 LC&A has an incorrect, overtly long name on BT's action tree both in Japanese and Turkish • RVB1-938 Restoring backups doesn't restore vulnerability detection and/or resolution statistics properly • RVB1-932 RT will lose the information on the vulnerabilities an asset has if a backup is restored from before the turn the vulnerabilities were found • RVB1-931 Restoring from backup doesn't affect detected and resolved incident count metrics • RVB1-926 Assets can be portscanned and enumerated if their upstream asset is denied/disconnected • RVB1-921 Last selected attack target is always available, even if the asset is disconnected or already compromised Features and Upgrades • RVB1-929 Boost Pilfer Data's buff to Electronic SE skill • RVB1-924 Reenable the ability to queue actions when it's not your turn without reintroducing RVB1-743

MAJOR UPDATE! Malware, Ransomware, Improved Incident Response, and More!

R1ngZer0steam_community_announcements

1679d ago

{STEAM_CLAN_IMAGE}/34132566/d62364ed46ea17cb8595b1670120fc1d2b0a421c.png

WHAT’S NEW?

This latest update represents a pivotal milestone for ThreatGEN® Red vs. Blue. All of the core features and mechanics are now in place for both the game version on Steam as well as the professional platform version. Moving forward, our development efforts will focus on enhancing the entire educational experience with eLearning content and curriculums that support the game, labs and challenges for training curriculums, and several built-in scenarios for incident response (IR) tabletop exercises. But more on all that in a bit. For now, what’s new in this latest update?

PROFIT & LOSS METER

{STEAM_CLAN_IMAGE}/34132566/74b45fed2a837125f097b3c41e5b40cf04f3cc91.png Under the threat intelligence score meter, there is a new profit & loss meter. The profit & loss meter represents the financial and production status of the company in relation to cyber outages. When assets are out of service, infected with malware, or having data exfiltrated, the meter will trend downward toward red until the issues are remediated. The more important the asset, the faster the meter will move. When the meter remains in the red for too long, the Blue Team loses.

NEW RED TEAM WIN CONDITION:

COMPANY PRODUCTION COMPROMISED This win condition is awarded when the blue team's production drops below a threshold for a set number of turns.

NEW RED TEAM ACTIONS AND STRATEGIES

MALWARE Installing disruptive malware is one way to disrupt the productivity (profit and loss) of the Blue Team. The effects can be amplified by using the malware to exfiltrate data. RANSOMWARE Ransomware is another devastating tool in the Red Team’s arsenal, which represents one of the most concerning threats in recent times. Unless the Blue Team is lucky enough to have a restore point created prior to the initial compromise, the only recourse they have is to pay the ransom (which is very expensive), crack the ransomware encryption key (which is very difficult to do), or replace the asset. Ransomware is a two-step process. The Red Team must first install ransomware and then activate the ransomware.

NEW BLUE TEAM ACTIONS AND STRATEGIES

CREATING RESTORE POINTS System backups are no longer a “one and done” action that improves your overall chances of cleaning a compromised asset. Now, the system backups action enables the ability to create restore points on each asset as a targeted action. When an asset is infected or compromised, the Blue Team can restore the asset to its last known restore point. However, the last restore point was created after the system was infected or compromised, the asset will still be in the infected or compromised state. IMPROVED INCIDENT RESPONSE (IR) All IR actions have been organized into their own grouping in the action tree view and several new IR actions have been added to improve the overall IR simulation. {STEAM_CLAN_IMAGE}/34132566/576c280bdaedb6a36f7d5b10f1d03af0f3986295.png

Restore from backup – As already mentioned the Blue Team can restore from backup if they have created a restore point on the affected asset.
Disconnect/reconnect the asset from the network – The Blue Team now has the ability to disconnect assets from the network (disconnect from upstream), effectively isolating them and cutting off further malicious activity. As such, the assets can also be reconnected to the network (reconnect to upstream).
Respond to ransomware infections – Ransomware infections present two additional and unique options. If you have the resources, you can pay the ransomware to recover your infected systems. Or, if you have enough time and security skills training, you can attempt to crack the ransomware encryption key.

WHAT’S NEXT?

In the first quarter of 2022, we will be launching our complete ThreatGEN® Red vs. Blue portal, which is a single point of access to not only the Red vs. Blue gamification platform, but also includes a complete array of cybersecurity education material, eLearning courses, guides, resources, and incident response (IR) tabletop exercise support, all leveraging the ThreatGEN® Red vs. Blue gamification platform. In addition to on demand eLearning courses, the Q1 2022 launch will also feature tons of new Red vs. Blue gamification content such as scenarios and labs to support the included courses. Focus on enhancing the analytics and reporting features and dashboards will also be a high priority in early 2022. For organizations wanting to use ThreatGEN® Red vs. Blue to support their IR tabletop exercises, the portal will include built in scenarios and eLearning content to support guided tabletop exercises ready to go “out of the box” without the need for extensive planning or even a facilitator or instructor. For those of you wondering about upcoming DLC and expansions for the Red vs. Blue game version available on Steam... the answer is YES! Look for DLC for the Steam version by mid 2022 and a single player campaign planned to release later in the year! Finally, with the existing Red vs. Blue tournament features, and new CTF capabilities on the way, 2022 will see the emergence of regularly scheduled ThreatGEN® Red vs. Blue public competitions and events! Be on the lookout for announcements soon!

Red vs. Blue Q2 2021 Update (Version 1.6) is Live!

R1ngZer0steam_community_announcements

1841d ago

{STEAM_CLAN_IMAGE}/34132566/b6db23b65b59590cc2bded37efd5e50ea8f49f3e.jpg The long-anticipated version 1.6 update is live, and it’s not just bug fixes! It is packed with features for improved player experience, replay value, and professional edition enhancements! Leading the pack are new environments and content. Players are no longer limited to the same network environment every time they play. They can now select from 3 different environments, with more on the way soon (including non-ICS related environments)! {STEAM_CLAN_IMAGE}/34132566/854740e07f73ffec64cfcf6f6c6ac5b0b57e118e.png There is also a new mechanic with a new Blue Team win condition… threat intelligence! Gather forensics evidence now in IR with a new action in addition and increase your threat intelligence score. Increase your threat intelligence score high enough and your adversary (the Red Team) will be apprehended for a Blue Team victory! Speaking of score, the old score has been replaced by a ton of much more useful metrics and stats at the end of the game. {STEAM_CLAN_IMAGE}/34132566/e39363476ce65c28f2ef2022962157f91924324b.png The UI has been updated to allow for playing actions, by category, directly from the network view interface. {STEAM_CLAN_IMAGE}/34132566/55daec45065b536cdc4e1dcbefdcf39ad57c3b5e.png {STEAM_CLAN_IMAGE}/34132566/98b6ec3359dd36be45a8b0b3b0277f1fe666a904.png The old Red Team research actions have been upgraded to a skill progression system for each vulnerability/exploit, allowing you more granularity to “specialize” your expertise. {STEAM_CLAN_IMAGE}/34132566/4df2d63dd2d433219bcd9f11adb3dfd434e5e9ac.png The network connectivity simulation has been improved. Now, when devices that connect to other downstream devices, such as routers, switches, and firewalls, are in a denied/down state, connectivity to those downstream assets are also unavailable. Visually, the connection lines change from green to gray. This means the Red Team can’t scan them, can’t see them, and can’t use them as a pivot. {STEAM_CLAN_IMAGE}/34132566/dd0e026e97fa2d75598b1a2cc8ef789fb3e71c85.png

What’s in store for the Q3 2021 Updates?

The 1.6 update marked a major milestone that not only provided major visual and functional improvements, but it also laid the foundation for some major upgrades, which will significantly improve long-term replay value. Here are some of what you can expect to see in this quarter’s updates from 1.6.1 through 1.7:

Level (network environment) selection will be available in multiplayer internet matches
A much-improved network play lobby that will show logged in users, user chat, and more game setting details in the available matches
Scenarios and challenges (levels with specific starting points and/or goals or win conditions)
A more dynamic computer AI opponent with several different tendencies and varying skill levels
New mechanics that track company profit/loss and reputation during incidents
Ransomware-based scenarios and mechanics
Additional IR communication actions for the Blue Team
Additional and more detailed ICS attack actions for the Red Team
More content and networks/levels to play
Downloadable content (DLC)… more details coming soon
And, as usual, we are always trying to improve the quality and value of the simulation experience with new actions, mechanics, adjustments, and other enhancements

Red vs. Blue Version 1.6 - Release notes

Bug Fixes

RVB1-287 BT IR music showing up during the game for the RT across a network game RVB1-285 The gather forensics action button does not activate when all metrics are met to do so RVB1-284 Game zooming in while scrolling when in the wiki RVB1-282 No change in music for between normal mode and IR mode for the BT. RVB1-281 Max turn limit and timer setting not persistent after playing a game and then exiting that game. RVB1-280 There is no sound for the Targeting selection function when you choose a targeted action RVB1-279 IR music plays over end of game music RVB1-278 Multiple campaigns can be queued at the same time if the RT has enough resources RVB1-275 The input field for a games seed in the settings menu does not take an entire seed number in game RVB1-244 Access Cut Off notification still pops up even if you don't actually have any pivots RVB1-230 Activate IR button doesn't work after refactor RVB1-223 ActionQueueItem code has unlocalized text RVB1-220 Detections reporting more than they should to analytics RVB1-162 Mute not remaining persistent when set at start menu (again) RVB1-158 Hold-scroll capabilities in scroll views not working properly RVB1-143 Initializing the targeting selection and selecting a target are the same sounds

New Features

RVB1-286 Asset name generator RVB1-270 End-game metrics RVB1-269 Red Team Skills UI RVB1-267 Re-work config/settings UI RVB1-265 New Vulnerability UI RVB1-263 Settings update RVB1-262 New action menu (by category) in bottom UI RVB1-261 Allow ending campaign by clicking on campaign status RVB1-260 Show 0day vulns in the attack dialogue vuln drop down RVB1-259 Show research level in vuln dialogue RVB1-258 Mouse over help text RVB1-257 Mimi maps for network view zoom RVB1-256 Non-targeted action buttons in UI RVB1-253 Update remote user behavior if VPN is denied RVB1-252 Redo game save/load state - developer feature RVB1-251 Redo localization for Asset and Action RVB1-248 Add zero day indication on vulns in Attack Dialogue RVB1-247 Automate RemoteUserManager RVB1-246 Move the mute preference to playerprefs rather than save it in the SO RVB1-237 Create a downstream/upstream system for assets RVB1-226 System for calculating cybersecurity and IR costs RVB1-225 Create a Threat Intelligence win condition for BT RVB1-209 Add categories to actions for analytics tracking RVB1-196 Get volume sliders in settings and working RVB1-178 AI Updates RVB1-97 Restructure the way assets, zones, connectors, etc. work together to make it more modular and easier to customize RVB1-92 Create multiple network diagrams (with different zones) RVB1-87 RT skill level indicator, per vuln RVB1-59 Additional Network Layouts

Red vs. Blue version 1.5 is now live!

R1ngZer0steam_community_announcements

1910d ago

{STEAM_CLAN_IMAGE}/34132566/1f3df02463245db939119b782df87195c49fdbbe.jpg The scheduled 1.5 turned out to be so big with so many features that we ended up having to split it up. So this 1.5 is the first half, focusing on player experience enhancements, and then in a few weeks we will release the other half as 1.6, focusing on replay value enhancements. Yes, we are completely skipping minor versions of 1.5 and going straight to 1.6! So what's in the 1.5 update?

Several minor bug fixes.

Several minor visual enhancements.

A LOT of visual and mechanical upgrades for a better user experience such as a new mechanic that allows you to click on assets and objects to play actions related to them instead of having to keep going back to the action menu every single time.

The action queue doesn't open every single time you play an action now. Instead, it just gives you an indicator that there are items in the queue, and how many.

The action queue now lets you know how many resources each action in the queue takes up.

You can now click on the assets and the resource icons at the top left of your screen to play actions.

More information is now attached to the assets such as host name, IP Address, MAC Address, and more. We did this for 2 reasons. The first is that it is setting up something much bigger coming later. Can't tell you what yet. But also, this provides more depth, especially for the Red Team, in terms of the value of information obtained at each phase of the Red Team discovery process. This also adds more depth to the Red Team process and strategy.

All of the MAC addresses, network address, and host IP Addresses are generated dynamically at the start of the game. What's will be in the 1.6 update? All of the new levels (networks), new actions, a new Blue Team Win condition, and some new concepts are coming in 1.6. What are the new networks? We aren't saying yet. What are the new Actions? We aren't saying yet but some ore ICS related, some are IR related, and some are general improvements. What are the new concepts? Hint: You will now have a threat intelligence score, a company revenue score, and more details in the end game screen such as how much you spent on cybersecurity, how much you spent on IR, and other stats. The new win condition will be based on gathering threat intelligence information during IR actions.

ThreatGEN® Red vs. Blue 90-Day Features Roadmap

R1ngZer0steam_community_announcementsworkshop

1939d ago

{STEAM_CLAN_IMAGE}/34132566/13e47b1a4f841a35d79859d42bb77ab8bda54b32.jpg Sugarland, Texas (April 6, 2021) – ThreatGEN, an OT cybersecurity firm and creator of the ThreatGEN® Red vs. Blue Cybersecurity Gamification platform, announced today their 90-Day and 2021 features roadmap. Having recently released an important foundational update (1.4.2) that implemented and upgraded necessary “back end” engine components, the stage is now set for a list of highly requested major features. “Red vs. Blue has already proven to be a cybersecurity training and gamification pioneer and industry disruptor in so many ways. But the features we have set to launch this year really are going to take cybersecurity training to a whole new level,” said Clint Bodungen, ThreatGEN’s Co-founder, CEO, and ThreatGEN® Red vs. Blue creator. “This is a testament to the fantastic communication and cooperative relationship we have with our customers, players, and the growing Red vs. Blue community. They have all been instrumental in Red vs. Blue’s evolution and success,” he added.

90-Day Features Roadmap

Several new network environments/scenarios and win conditions – Previously, the game was played within a single network environment. There will now be multiple networks to choose from (or have one randomly selected), across several different industries with different win conditions.
Tabletop Exercise Module (Professional and Enterprise editions only) – Highly requested by our enterprise customers, this module will allow for a much more immersive, visual, and entertaining way to provide tabletop IR exercises.
Customizable environments (Enterprise edition only) – We can customize the in-game network environment to resemble our enterprise customers’ networks.
Level 2 analytics with additional learning objective-based performance metrics (Professional and Enterprise editions only) – Level 1 analytics introduced instructors and training managers to basic performance tracking using game data. Level 2 will provide a more detailed data set to analyze student/employee performance per session and/or over time using statistics tracking and learning objective-based metrics.
Downloadable post-game report (Professional and enterprise editions only) – See side by side, turn by turn comparisons of the red team and blue team actions, as well as a performance analysis.
Android/iOS editions – Finally, play on Android and iOS mobile devices. We know this release has been delayed before, but there have been a couple of Google Play Store and Apple App Store hurdles.
Challenges (a.k.a. “side quests”), including in-game achievements, badges, and unlocks – Take a break from standard gameplay to complete challenges for achievement badges and unlock special features.
Labs (Professional and Enterprise editions only) – These labs will help exercise and measure performance across a variety of learning objectives outlined in cybersecurity curriculums.
New Actions for Red Team and Blue Team – Patch Management Server/Zone Patching, More granular ICS/OT Path (for improved ICS/OT learning), and more…

Remaining 2021 Features Roadmap (more details will be provided in subsequent, quarterly announcements)

A complete Strategy Guidebook (which also translates to real-world cybersecurity best practices and advice)
More technical features, actions, and mechanics for those that are looking for a more technical cybersecurity experience in their ThreatGEN® Red vs. Blue gamification
Computer AI difficulty levels
Single player campaigns
Save/Load games
Steam, Android, and iOS platform stats, achievements, and leaderboards
Fully automated CTF/tournament brackets (Professional, CTF, and Enterprise editions only)
Custom avatars
Improved network lobby
In-Game tutorial
In-game advisor
New Actions and Mechanics: Improved IR value for backups, Threat Intelligence, Dual Homed hosts, and more…
Machine learning-based analysis (more to come on this in a future announcement…)

Learn more at

https://threatgen.com/threatgen-red-vs-blue-90-day-features-roadmap/

The 1.4.1 Update is Live

ThreatGEN Teamsteam_community_announcements

2052d ago

{STEAM_CLAN_IMAGE}/34132566/589d662ba1ca1c75659fef3dcaaca80854ff6a0c.jpg

Summary

The 1.4.1 update provides many visual and textual fixes and updates to the user interface, as well as enhancements to performance and game balance. However, the primary focus of this update is the implementation of user analytics for Professional, Education, and Enterprise Edition licensees. (For more information, visit our website: https://threatgen.com/red-vs-blue/) The analytics roadmap has two levels. Level 1 Analytics, rolled out this update, provides the following:

User statistics (games played with dates, duration, total turns, score, win condition, games won or lost, red team or blue team, games won or lost as each team, human or computer opponent, wins and losses versus each type of opponent, score, successful compromises, and successful detections)
Ability to filter by game, team, and opponent type
Ability to sort by, and easily view, statistics for each match (useful for events, assignments, labs, and competitions)

Level 2 Analytics, available in Q1 2021, will include:

Individual cybersecurity category scoring and analysis such as governance, ICS security, physical security, security policy, and cybersecurity strategy
Expanded statistics tracking such as actions played, research performed, and assets attacked

Current Release Notes

1.4.1 Release Notes (Professional Only)

Added Level 1 Analytics
Added web caching to improve game load time
Added CRC to state packets to minimize “out of sync” issues on unreliable network connections
Added current registered/activated username/email to the settings/about UI
Added copy/paste functionality to activation input fields

1.4.1 Release Notes (General)

Adjusted game balanced to reduce disproportionate blue team disadvantage
When red team compromises network devices, they can see the connected devices, or devices that device “knows about” (similar result as a host scan)
Added shield icon legend in red team UI
Added current resource pool indicators to the action tree UI
Added copy/paste functionality to all lobby input fields
Changed the “Tech Inspection” action to “Threat Hunting” and made wiki updates, accordingly
Changed “Reset” action wording to “Reboot”
Updated appearance of “Cipher” character
Minor audio bug fixes and updates
Minor visual and text fixes and updates

What’s Next?

Professional

Level 2 Analytics
Educational scenarios and labs
Accompanying curriculums
LMS support
Tabletop exercise mode

General

Additional network environments
Scenarios
Campaign mode

Join our Discord Server!

https://discord.gg/wbVhMJMDr6

The Long Awaited 1.4 Update Has Arrived!

R1ngZer0steam_community_announcements

2156d ago

{STEAM_CLAN_IMAGE}/34132566/e34f76c76dbd484ff649e09db0b03c148aa93020.jpg It’s official! The long awaited 1.4 update has been released! This updated has tons of new features and visual enhancements that increase the player experience and overall depth of the game.

Summary

This is a major feature update intended to increase the depth and real-life correlations of the game as well as improve the overall player experience. In addition to bug fixes and graphical enhancements, this update adds more actions for both the red team and the blue team, expanded social engineering capabilities, expanded incident response process, physical security elements, and updated mechanical/UI features for ease of use.

Details

User Interface (UI)

Removed the “card stage” and action “cards” altogether
Added action icons to action menu items
Made the action log more visual rather than just lines of text
Enhanced main background image
New background images that change based on situation
New status indicators on lower UI for both the RT and BT
Location indicator graphics for RT
Rearranged button layout for end game screen
Small pop up dialogue animation
Remote user moved to the “cloud zone” where the card stage used to be, and added a second remote user
Turn start notifications dialogues are now divided into Milestones, Achievements, and Informational
Enhanced dialogue format (changed the skin and added transparent screen “blackout”)
Moved research actions to a consolidated “research” dialogue with a pick list
Animated red target image when attacks are detected
Network lobby red and blue team select buttons
Denied/out of service assets are not transparent gray
Game button shows the color of the team chosen by the game creator
Ability to view both teams and their action logs in the end game results
Updated and improved game text in several areas
Overall image quality enhancement
Added audible timer ticks when time is about to expire

Functional/Mechanical Changes

Added new actions for both BT and RT (about double)
Expanded social engineering options and added an “attack campaign” dialogue with pick lists for options
Actions are now played strictly from the action menu (since the card stage has been removed)
Expanded wiki menu collider/hit box (on action menu items) to entire object
Added a physical security category, with related actions and mechanics for both the RT and BT
Added actions to manage moving to new physical locations as the RT (location options are in a “change location” dialogue with pick lists for the options, which include physical, electronic, and social engineering means in addition to locations)
Expanded security monitoring: Now you install the SIEM, followed by network sensors (by zone) and endpoint protection/HID (by asset)
Network sensors have a chance to detect network attacks (even if unsuccessful)
Endpoint protection/HID now detect (% chance) of detecting a compromise
Some actions are only available in specific modes (IR vs. normal for BT, remote vs. onsite for RT)
For physical security, in addition to physical location and access, added ability to create and drop malicious USBs and plant rogue devices
Expanded WiFi router relevance: It can now be scanned and cracked when onsite, then used as a pivot, and can be secured with strong WiFi security by the BT
Player can choose to be red or blue team when creating a game instead of the game creator always being blue team
Red Team can upgrade their computer/rig, which increases the maximum resource points by 1
Win conditions are now set and not adjustable
Removed “around the world” and “weathered the storm” win conditions. Now, the RT can win by damaging the ICS process, BT can win by “all clear” removing all vulnerabilities, or either can win by default high score victory
Sound can be muted from the start menu and the setting will remain persistent
Ability to suppress each of the individual notification dialogue types, in the settings
Ability to toggle notification suppression in the in-game menu
Ability to view both teams and their action logs in the end game results
Added hidden “Easter eggs” (details not disclosed)
Updated the scoring mechanics that include the new actions and mechanics, as well as several other factors, rather than just based on milestones (scoring details will be released)

Bug Fixes

Shield icons become “unclickable” due to a “ghost” collider overlap after using the attack dialogue
When targeting RT assets near the upper right corner of the card, you need to click on the asset where the targeting image ISN'T to get it to register due to a “ghost” collider overlap
Fixed pointer icon display bug when hovering over shield icons
End Turn button enabled when it’s not the players turn
Timer out of sync issue causing online play disconnects and sync issues
Targets for targeted actions that are too expensive to play don't clear the target type when the action fails to queue
Overlay issue. When both the action queue and the action log are open you cannot close out the action queue until you close the action log
In hot seat mode, on the first turn at the beginning of the game, BT can start playing actions before pressing Start Turn
"Costs too much" dialogue only works the first time
End game points not the same for players in networked games
HMI didn’t have correct asset visibility settings
Lobby inconsistent state when second player leaves
More than two players can enter a game room
Shield icon can be clicked through popup dialogue boxes
Resume button makes End Turn available when it's not the player's turn
Player can advance turn before the other player I loaded, causing adverse behavior
If the remote user is a pivot, all "visibility" that the remote user provides should go away if the remote user is not logged in
BT staff resources mysteriously disappearing

Single Player Is Here! Update 1.2 Release Notes

ThreatGEN Teamsteam_community_announcements

2443d ago

{STEAM_CLAN_IMAGE}/34132566/03a762b510ed914b3c81c894f98a4e62e9a0fae7.jpg Update 1.2 introduces the highly anticipated single player mode as well as several feature updates and bug fixes:

Added resource cost display to the action tree (action menu) buttons
Made vulnerability remediation targeted (asset specific)
Made incident response targeted (asset specific)
Increased the length of time that the remote user stays "logged in"
Updated the targeting visual to an animated target rather than just turning the asset green
Added an alert sound when it is your turn
Updated how SIEM/IDS Sensors behave when discovered as being controlled or denied. Once they are discovered, they stay discovered
Made the "grayed out" more obvious for the "end turn" and "+" buttons
Mute button now mutes all sound and not just the background music
The yellow "+" button no longer shows on action buttons (in the action tree) if they are not available to play
Adjusted the prerequisite for system hardening
Added "A.I. Behavior Setting" (starting seed) in settings, which controls the random number generator for the games initial starting configuration (vulnerability placement). This ensures that groups of teams start with the same configuration for training and events
Tightened up game mechanics for DoS, making sure that a denied asset overrides any other abilities/actions on that asset until the DoS is cleared
Player will now lose money each turn that they have an asset in a denied state
Added a "negative milestone" that lets the player know of the new denied asset penalty

Fixed pivoting issues related to social engineering as well as the remote user
Fixed a bug related to firewall visibility when port scanning in certain zones
Fixed a bug where successful social engineering wasn't making some assets visible upon compromise
Fixed game restart sync bug in internet games
Fixed a bug that allowed players to end their turn when it wasn't their turn (breaking the game)
Fixed games not reporting to the leaderboard (live events only)
Fixed "play for score" win condition not working properly
Fixed turn timer reset issues
Fixed remote user behavior bug (consistency between red team and blue team)
Fixed bug that allowed players to play actions from the action tree when it is not their turn
Fixed re-targeting bug (selecting a target, removing it, then re-selecting it caused scan to return "unsuccessful")
Fixed a bug that caused the action cards to get out of sync
Fixed "code review" bug that wasn't actually finding vulnerabilities, it was just buffing overall defense
Fixed a bug that never allowed the yellow shield to show over the Radio 2 asset (for blue team)

Various minor visual and audio tweaks

ThreatGEN: Red vs. Blue news & patch notes

ThreatGEN: Red vs. Blue news & patch notes

WHAT’S NEW?

PROFIT & LOSS METER

NEW RED TEAM WIN CONDITION:

NEW RED TEAM ACTIONS AND STRATEGIES

NEW BLUE TEAM ACTIONS AND STRATEGIES

WHAT’S NEXT?

What’s in store for the Q3 2021 Updates?

Red vs. Blue Version 1.6 - Release notes

Bug Fixes

New Features

90-Day Features Roadmap

Remaining 2021 Features Roadmap (more details will be provided in subsequent, quarterly announcements)

Learn more at

ThreatGEN® Red vs. Blue will be 50% off starting this week! Just In Time for Christmas!

Summary

Current Release Notes

What’s Next?

Join our Discord Server!

It's Our Annual Black Friday / Cyber Monday Sale!

Summary

Details

User Interface (UI)

Functional/Mechanical Changes

Bug Fixes

Steam news for ThreatGEN: Red vs. Blue