Practical Tools & Resources
This appendix contains ready-to-use tools, templates, and guides for running Malware & Monsters sessions. All resources are designed for quick access during gameplay and preparation.
Quick Start Essentials
New to facilitating? Start here:
- IM Quick Start Guide - Complete guide for your first session
- New IM Prep - Essential prep steps for first-time facilitators
Session Scripts
Essential scripts for maintaining session flow and energy:
- Opening Script - Welcome players and set expectations
- Round Transitions - Smooth transitions between discovery phases
- Closing Script - Wrap up sessions with reflection and next steps
Question Banks
Curated questions organized by discovery phase to drive player-led investigation:
- Discovery Questions - Initial incident assessment
- Investigation Questions - Deep-dive analysis and attribution
- Response Questions - Containment and remediation strategies
- Emergency Questions - Crisis escalation scenarios
Preparation Templates
Structured approaches for different facilitation styles and time constraints:
- 5-Minute Prep - Ultra-fast session setup
- New IM Prep - Comprehensive guide for first-time facilitators
- Story-Driven Prep - Narrative-focused session design
- Scenario Card Template - Create custom scenarios
- NPC Development - Memorable character creation
- Organizational Contexts - Industry-specific settings
Scenario Planning Documents
Comprehensive facilitation guides that build on scenario cards with detailed preparation support:
- Planning Template Guide - Complete explanation of planning document structure and usage
- Scenario Planning Template - Master template for creating custom planning documents
Planning Documents by Malmon
Social Engineering & Downloaders
- GaboonGrabber: Healthcare • Education • Financial
- FakeBat: Small Business • Gaming Cafe • Nonprofit • Coworking
Worms & USB Propagation
- Code Red: E-commerce • University • Government
- Raspberry Robin: Healthcare • Financial • Government • Manufacturing
Ransomware
- WannaCry: Hospital • Law Firm • Municipality
- LockBit: Hospital • Law Firm • Municipality
RATs & Espionage
- Poison Ivy: Corporate • Financial • Medical
- Gh0st RAT: Corporate Espionage • Law Firm • University • Financial
- Wire Lurker: Creative • EdTech • Media
APT & Nation-State
- Noodle RAT: Aerospace • Biotech • Investment Bank • Tech Unicorn
- Litter Drifter: Aid • Media • Defense • Government
- Winnti: Biotech R&D Espionage
Critical Infrastructure
- Stuxnet: Manufacturing • Power Plant • Research • Water
Total: 43 comprehensive planning documents available
Slide Presentation Tools
RevealJS presentation guides for live session facilitation:
- Creating Slides - Build custom presentations with M&M theme from scratch
- Scenario Slides Quick-Start - Get slides running in 5 minutes
- Using Scenario Slides - Comprehensive guide to running live sessions
- Keyboard Reference Card - Printable shortcuts for live sessions
- Slides Troubleshooting - Fix common presentation issues
Facilitation Guides
Specialized techniques for advanced session types and group management:
- Structured Debrief Protocol - After-action review methodology for learning extraction and behavioral commitment
- Contemporary Legacy Malmon Guide - Evolution-focused legacy threat facilitation
- Legacy Malmon Modernization Guide - Historical threat adaptation techniques
Real-Time Guides
In-the-moment tools for managing group dynamics and participation:
- Technical Gap Protocols - Bridge knowledge differences gracefully
Quick Reference Usage
- Before Sessions: Use Preparation Templates based on available time and experience
- During Sessions: Reference Question Banks and Real-Time Guides for smooth facilitation
- Between Sessions: Apply Session Scripts for consistent opening/closing experiences
- For Custom Content: Leverage templates to create organization-specific scenarios and NPCs