Practical Tools & Resources
This appendix contains ready-to-use tools, templates, and guides for running Malware & Monsters sessions. All resources are designed for quick access during gameplay and preparation.
Quick Start Essentials
New to facilitating? Start here:
- IM Quick Start Guide - Complete guide for your first session
- Quick Demo Template - Run your first session in 30-45 minutes
- New IM Prep - Essential prep steps for first-time facilitators
Session Scripts
Essential scripts for maintaining session flow and energy:
- Opening Script - Welcome players and set expectations
- Round Transitions - Smooth transitions between discovery phases
- Closing Script - Wrap up sessions with reflection and next steps
Question Banks
Curated questions organized by discovery phase to drive player-led investigation:
- Discovery Questions - Initial incident assessment
- Investigation Questions - Deep-dive analysis and attribution
- Response Questions - Containment and remediation strategies
- Emergency Questions - Crisis escalation scenarios
Preparation Templates
Structured approaches for different facilitation styles and time constraints:
- 5-Minute Prep - Ultra-fast session setup
- New IM Prep - Comprehensive guide for first-time facilitators
- Story-Driven Prep - Narrative-focused session design
- Legacy Malmon Prep - Historical threat modernization
- Scenario Card Template - Create custom scenarios
- NPC Development - Memorable character creation
- Organizational Contexts - Industry-specific settings
- Scenario Templates - Reusable situation frameworks
Scenario Planning Documents
Comprehensive facilitation guides that build on scenario cards with detailed preparation support:
- Planning Template Guide - Complete explanation of planning document structure and usage
- Scenario Planning Template - Master template for creating custom planning documents
Planning Documents by Difficulty Tier
Tier 1: Beginner Scenarios (60-90 minutes)
- GaboonGrabber: Healthcare • Education • Financial
- Code Red: E-commerce • University • Government
- FakeBat: Small Business • Gaming Cafe • Nonprofit • Coworking
- Raspberry Robin: Healthcare • Financial • Government • Manufacturing
- Wire Lurker: Creative • EdTech • Media
Tier 2: Intermediate Scenarios (90-120 minutes)
- WannaCry: Hospital • Law Firm • Municipality
- Poison Ivy: Corporate • Financial • Medical
- Ghost RAT: Corporate Espionage
- LockBit: Hospital • Law Firm • Municipality
Tier 3: Expert Scenarios (150 minutes)
- Stuxnet: Manufacturing • Power Plant • Research • Water
- Noodle RAT: Aerospace • Biotech • Investment Bank • Tech Unicorn
- Litter Drifter: Aid • Media • Defense • Government
- Ghost RAT Advanced: Law Firm • University • Financial
Total: 42 comprehensive planning documents available
Slide Presentation Tools
RevealJS presentation guides for live session facilitation:
- Creating Slides - Build custom presentations with M&M theme from scratch
- Scenario Slides Quick-Start - Get slides running in 5 minutes
- Using Scenario Slides - Comprehensive guide to running live sessions
- Keyboard Reference Card - Printable shortcuts for live sessions
- Slides Troubleshooting - Fix common presentation issues
Facilitation Guides
Specialized techniques for advanced session types and group management:
- Contemporary Legacy Malmon Guide - Evolution-focused legacy threat facilitation
- Legacy Malmon Modernization Guide - Historical threat adaptation techniques
Real-Time Guides
In-the-moment tools for managing group dynamics and participation:
- Technical Gap Protocols - Bridge knowledge differences gracefully
Quick Reference Usage
- Before Sessions: Use Preparation Templates based on available time and experience
- During Sessions: Reference Question Banks and Real-Time Guides for smooth facilitation
- Between Sessions: Apply Session Scripts for consistent opening/closing experiences
- For Custom Content: Leverage templates to create organization-specific scenarios and NPCs