XP & Badge Progress Tracker

Print this page and keep it with your session materials to track your cybersecurity learning progress.

---

Player Information

Name: ________________________________________________
Organization: ________________________________________________
Started M&M: _________________ Current Date: _________________

---

Experience Points (XP) Tracking

Session XP Log

Session Date	Malmon Encountered	Your Role	XP Earned	Running Total
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________
____________	_________________	_________	_________	_____________

XP Categories Quick Reference

Mark achievements during sessions:

Discovery Achievements (2-3 XP each):

• First Contact (+2 XP) - Identifying new Malmon type
• Pattern Recognition (+3 XP) - Connecting symptoms to attack techniques
  
• Evidence Analysis (+3 XP) - Drawing conclusions from digital artifacts
• Collaborative Insight (+2 XP) - Building on teammates’ discoveries

Investigation Mastery (3-5 XP each):

• Impact Assessment (+4 XP) - Determining attack scope and damage
• Attribution Analysis (+5 XP) - Identifying attack techniques/threat actors
• Vulnerability ID (+4 XP) - Understanding how attack succeeded
• Timeline Construction (+3 XP) - Building attack progression narratives

Response Excellence (4-6 XP each):

• Strategic Containment (+5 XP) - Optimal controls for specific Malmons
• Team Coordination (+4 XP) - Multi-role response coordination
• Crisis Communication (+3 XP) - Managing stakeholder expectations
• Adaptive Response (+6 XP) - Adjusting when initial approaches fail

---

Security Domain Badges Progress

Core Security Domain Badges

🌐 Network Security Badge - “Guardian of Digital Highways”

• Contain 5 Worm-type Malmons using network isolation (___/5)
• Demonstrate traffic analysis and monitoring proficiency
• Coordinate effective network-based incident response
• Contribute to network security architecture improvements

Progress Notes: _________________________________________________ ____________________________________________________________________

---

💻 Endpoint Security Badge - “Protector of Digital Workstations”

• Contain 5 Trojan or Rootkit-type Malmons (___/5)
• Master behavioral analysis and system monitoring techniques
• Lead system recovery and hardening efforts
• Develop endpoint protection strategies

Progress Notes: _________________________________________________ ____________________________________________________________________

---

🗄️ Data Protection Badge - “Guardian of Digital Assets”

• Defend against 5 Ransomware or Infostealer-type Malmons (___/5)
• Implement effective backup and recovery strategies
• Demonstrate data loss prevention techniques
• Lead data breach response efforts

Progress Notes: _________________________________________________ ____________________________________________________________________

---

👤 Human Factor Security Badge - “Defender Against Social Engineering”

• Counter 5 social engineering or phishing-based attacks (___/5)
• Develop effective security awareness training programs
• Demonstrate crisis communication skills
• Lead user education and awareness efforts

Progress Notes: _________________________________________________ ____________________________________________________________________

---

🏭 Critical Infrastructure Security Badge - “Protector of Essential Systems”

• Defend against 3 industrial control system threats (___/3)
• Understand operational technology (OT) security principles
• Coordinate IT/OT security integration efforts
• Develop business continuity and disaster recovery plans

Progress Notes: _________________________________________________ ____________________________________________________________________

---

🏛️ Governance and Compliance Badge - “Navigator of Regulatory Requirements”

• Manage compliance aspects of 5 security incidents (___/5)
• Demonstrate understanding of relevant regulatory frameworks
• Lead compliance reporting and documentation efforts
• Develop risk management and governance programs

Progress Notes: _________________________________________________ ____________________________________________________________________

---

Advanced Specialization Tracking

Elite Challenge Levels

🔥 APT Specialist - “Hunter of Advanced Persistent Threats”

• Counter 3 nation-state level Malmons (⭐⭐⭐) (___/3)
• Demonstrate advanced threat hunting capabilities
• Lead complex, multi-month incident investigations
• Develop threat intelligence and attribution analysis

Progress Notes: _________________________________________________

---

🌍 Global Incident Commander - “Leader of International Response Efforts”

• Coordinate incident response across multiple organizations
• Manage complex, multi-stakeholder security incidents
• Demonstrate cross-cultural communication and coordination
• Lead international cybersecurity cooperation efforts

Progress Notes: _________________________________________________

---

🧪 Security Researcher - “Discoverer of New Threats and Defenses”

• Discover and document a new Malmon variant or technique
• Publish original cybersecurity research
• Contribute new detection or defense capabilities to community
• Mentor other researchers and practitioners

Progress Notes: _________________________________________________

---

Goals & Development Planning

Current Goals (Next 3 Months)

Badge Target: ________________________________________________

Skills to Develop: ____________________________________________ __________________________________________________________________

Learning Priorities: __________________________________________ __________________________________________________________________

Notes & Reflection Space

Key Insights from Recent Sessions: __________________________________________________________________ __________________________________________________________________ __________________________________________________________________

Questions to Explore Further: __________________________________________________________________ __________________________________________________________________ __________________________________________________________________

How to Apply Learning in Real Work: __________________________________________________________________ __________________________________________________________________ __________________________________________________________________

---

This tracker is designed to be printed and filled out by hand. Keep it in your session folder and update it after each M&M session to maintain awareness of your cybersecurity skill development.