In this scenario, the notorious Dragonfly APT group, also known as Energetic Bear, targets the energy sector by infiltrating the supply chain. The attackers have trojanized legitimate software updates for industrial control systems (ICS) equipment. This operation will train participants to identify the 'Havex' RAT and trace the network reconnaissance activities within an industrial control network, enhancing their skills in defending critical infrastructure.