Episode 18 - Live Fire Defense at Locked Shields

In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves. Adam and Nico share crucial insights on navigating vendor interoperability, the critical value of contextual log enrichment, and deploying specialized SCADA protocol packages to monitor critical infrastructure under intense pressure. For enterprise defenders, this episode highlights why a transparent, open-foundation network detection and response (NDR) strategy is essential for surviving real-world tactical friction and modern cyber threats.