This event runs over the course of the conference. It simulates real-world incident response and scenarios, and teams work to protect their infrastructure (their flag) against a number of escalating events. Teams are provided with an AWS environment that is already running, and they have to design and implement detective and preventative controls that do not impede their application’s availability. The team that has the most points at the end of the conference wins.