Session Walkthroughs & Examples
This appendix provides complete session examples and troubleshooting scenarios to help Incident Masters develop confidence and handle challenging facilitation situations.
Complete Session Examples
Detailed walkthroughs showing full sessions from start to finish, including player interactions, decision points, and facilitator responses:
- Gaboon Grabber Walkthrough - Healthcare phishing scenario with new player group
- WannaCry Walkthrough - Hospital ransomware with time pressure and technical complexity
- Stuxnet Walkthrough - Industrial sabotage with expert players and ethical dilemmas
Legacy Malmon Facilitation
Special guidance for running historical threats in modern contexts:
- Legacy Malmon Examples - Adapting Code Red, Stuxnet, and early malware for contemporary learning
Problem Scenario Solutions
Real-world facilitation challenges and proven techniques for handling them:
- Silent Group - When players wonβt engage or participate actively
- Expert Dominated - Managing groups where one player dominates discussion
- Lost Group - Recovering when players are confused or overwhelmed
How to Use These Walkthroughs
For New Incident Masters
- Start with Complete Sessions: Read full walkthroughs to understand session flow and pacing
- Study Player Interactions: Notice how questions drive discovery rather than exposition
- Observe Problem Handling: See how experienced IMs redirect and recover from challenges
For Experienced Facilitators
- Reference Problem Scenarios: Quick access to solutions for common facilitation challenges
- Adapt Techniques: Extract specific methods for use in your own sessions
- Compare Approaches: Multiple solutions for handling similar situations
Session Preparation
- Choose Similar Scenarios: Find walkthroughs that match your planned session complexity
- Practice Key Moments: Rehearse difficult transitions and decision points
- Prepare Contingencies: Know how to handle if your session goes off-script
Post-Session Analysis
- Compare Outcomes: Review how your session aligned with walkthrough examples
- Identify Improvements: Learn from differences between planned and actual session flow
- Build Experience: Document your own successful techniques for future reference
Each walkthrough includes: - Session Setup: Group composition, time constraints, and preparation notes - Turn-by-Turn Play: Actual dialogue and decision-making with timing notes - Facilitator Commentary: Why specific choices were made and alternative approaches - Outcome Analysis: What worked well and what could be improved - Adaptation Notes: How to modify for different groups or constraints