Fake Customer Scenario

Meridian Freight Group is a synthetic logistics company used to demonstrate the project workflow.

Customer Decision

The CISO needs to decide whether cloud identity activity against privileged administrators justifies a 30-day detection engineering sprint before the next board reporting cycle.

Scenario

An adversary obtains a privileged cloud administrator session, changes MFA controls, enumerates backup resources, weakens backup protection, and attempts backup vault deletion before ransomware deployment.

Crown Jewel

The primary crown jewel is the production backup vault for route optimization databases.

Source File

See examples/scenarios/meridian-freight-cloud-identity-scenario.md.