The Standoff cyber exercises took place during the Digital Solutions IT forum, featuring cybersecurity teams from major Russian companies. For the first time, participants investigated both human-led and AI-agent attacks, while an AI system participated alongside human teams.
The eight-hour online event involved specialists from the public, financial, banking, retail, real estate, telecommunications, and IT sectors. Teams focused on reconstructing attack chains, from identifying entry points to determining the attackers' objectives.
The evaluation methodology measured defense effectiveness based on business and revenue impact. Organizers assessed the financial consequences of critical events, prioritizing speed and investigation quality. The winning team, NullSec, successfully preserved the highest business profit.
In specific categories, beCloud was recognized as the top AI detective for identifying attack sources, while APT DOM excelled in forensics. The top three overall performers included NullSec, APT DOM, and Citrusaurus.
The MaxPatrol O2 AI system from Positive Technologies participated in the exercises to analyze incidents and collect context for threat response. According to Ivan Bulavin, director of Standoff 365, the event demonstrated that AI is effective for both offensive automation and defensive tasks.
