Skip to main content
1-Day Pilot // Sacramento, CA Presented by MCPA Sacramento

0x0000: ./0xsac --init

0xSAC // Sacramento Advanced Cyber Range & Proving Ground

Sacramento's practitioner-led proving ground bridging live-fire adversary containment with strategic crisis decision-making.

Exercise at a glance

0x05 // Blue
5Defending Pods
0x01 // Red
1Dedicated Adversary Cell
0x02 // Sync
2Concurrent Tracks
0x08 // CPE
8Continuing Professional Education (CPE) Credits

0x0100 // Choose your track

Two tracks. One synchronized incident.

Both tracks run concurrently against the same scenario. What defenders see on the wire becomes what leaders must decide on in the boardroom.

TRACK 1 hands-on-keyboard

0xSAC // LIVEFIRE & CTF

For SOC analysts, incident responders, network defenders, and Red/Blue operators.

  • Hands-on-keyboard adversary eviction from a live, contested environment
  • MITRE ATT&CK-mapped kill-chains executed by a dedicated adversary cell
  • Real-time packet inspection and endpoint telemetry hunting
  • Capture-the-Flag challenges scored alongside service uptime
TRACK 2 decision-making

0xSAC // EXEC

An Executive Decision Simulation for Agency Directors, CISOs, and City Managers.

  • Statutory disclosure clocks and regulatory notification decisions
  • Live media injects and public-communication pressure
  • Continuity of operations for essential public and business services
  • Strategic incident governance and executive crisis decision-making

0x0200 // Operational flow

The 1-Day Pilot format

  1. PHASE I

    Audit & Harden

    Teams baseline telemetry, inventory their pod, and remediate vulnerabilities before the adversary cell goes live.

  2. PHASE II

    Live-Fire Defense

    Defenders contain an active intrusion while executives work the synchronized crisis simulation fed by range telemetry.

  3. PHASE III

    Joint Hotwash / AAR

    Red, Blue, and Executive participants reconcile what happened, what was decided, and what to fix. Scores and CPEs are issued.

See the full 0800–1730 schedule

0x0300 // Attendee portal

Register your interest

Seats are limited by pod capacity. Pick the track that matches your role, review the syllabus and prerequisites, then request a seat. Confirmed attendees receive range credentials and portal access ahead of event day.

Track 1 — Live-Fire & CTF

You run tools, read packets, and write detections. Bring a laptop.

Request a Track 1 seat

Track 2 — Executive Simulation

You own the decision, the disclosure, and the press conference.

Request a Track 2 seat

Registration is staged — event date TBD. Requests are routed to [email protected].

0x0400 // Partners

Presented by MCPA Sacramento | Engineered by Mogsec

A 501(c)(3) educational exercise presented by the Military Cyber Professionals Association Sacramento Chapter, with engineering and planning by Mogsec.

Infrastructure & Cloud Range Partners

  • World Wide Technology WWT // Cloud Range
  • Cisco Infrastructure // Telemetry

Track & Lunch Sponsors

  • Track 1 Sponsor — Available
  • Track 2 Sponsor — Available
  • Lunch Underwriter — Available

View the sponsorship prospectus