Litter Drifter Defense Contractor Espionage - Planning Guide

Litter Drifter Defense Contractor Espionage

Complete preparation guide for defense technology espionage scenario

Comprehensive facilitation guidance for Litter Drifter Defense Contractor Espionage featuring USB-propagating nation-state worm, military technology surveillance, classified defense project targeting, and geopolitical intelligence collection affecting strategic defense capabilities.


1. Quick Reference

Element Details
Malmon Litter Drifter (Bug/Flying dual-type)
Difficulty Tier Tier 3 (Expert)
Scenario Variant Nation-State: Military Defense Contractor
Organizational Context Aegis Defense Systems: 320 engineers, reconnaissance systems, $80M military contract
Primary Stakes Defense contracts + Military technology + National security + Strategic intelligence
Recommended Formats Full Game / Advanced Challenge
Essential NPCs Colonel Sarah Mitchell (Defense Program Manager), Dr. James Peterson (Security Clearance Officer), Rachel Kowalski (Senior Systems Engineer)
Optional NPCs Agent Lisa Rodriguez (Counterintelligence Specialist), Military Program Office Representative, Foreign Intelligence Analyst

Scenario Hook

Aegis is finalizing reconnaissance systems for Tuesday military delivery when security discovers USB-propagating malware targeting defense contractors supporting Ukrainian operationsβ€”nation-state espionage worm collects intelligence on military technology development and strategic defense capabilities.

Victory Condition

Team identifies USB-propagating nation-state surveillance through removable media analysis, protects classified military technology from continued intelligence collection, ensures operational security and counterintelligence coordination, and maintains defense contract delivery while addressing geopolitical targeting of strategic capabilities.


2-12. [Complete Planning Structure]

Opening: β€œIt’s Friday morning at Aegis Defense Systems. Defense Program Manager Colonel Sarah Mitchell is finalizing advanced reconnaissance systems for Tuesday military delivery. But Security Clearance Officer Dr. Peterson reports engineers received suspicious USB devices at defense industry conference. Forensic analysis reveals sophisticated nation-state worm specifically targeting defense contractors supporting Ukrainian operations. Foreign intelligence services are systematically collecting classified military technology specifications and strategic defense capabilities through geopolitical espionage campaign.”

Key NPCs:

  • Colonel Sarah Mitchell: Defense program manager balancing military delivery with security incident
  • Dr. James Peterson: Security clearance officer investigating foreign intelligence targeting
  • Rachel Kowalski: Senior engineer with compromised reconnaissance system specifications

Response Options:

  • USB device isolation and classified system security protocols (DC 12)
  • Military technology protection and counterintelligence coordination (DC 14)
  • Defense contract delivery decision under nation-state surveillance (DC 16)

Learning Objectives:

  • USB malware in defense industrial base environments
  • Classified information protection from geopolitical targeting
  • Nation-state military technology acquisition strategies
  • Defense contractor security clearance procedures
  • Counterintelligence coordination and strategic intelligence assessment

MITRE ATT&CK:

  • T1091 (Removable Media Replication), T1025 (Data from Removable Media), T1005 (Classified Technology Theft)

Notes for IM Customization

What worked well:

What to modify next time:

Creative player solutions:

Timing adjustments: