Verified Commit 382e7b24 authored by Richard Glosner's avatar Richard Glosner
Browse files

Merge branch 'main' into COPY-97e90227

parents ccfc12a9 72a54808
Loading
Loading
Loading
Loading
Compare 332af7ec to 39a25faf
Original line number Diff line number Diff line
Subproject commit 332af7ec9770a3c0db26c5ea045170184e2447a3
Subproject commit 39a25faf79dbc01d3622410d1c0e3d8f20d44283
+16 −11
Original line number Diff line number Diff line
@@ -12,18 +12,23 @@ The INJECT team has prepared an example content that is available to you for the

!!! Warning

    - The provided exercise definitions are of definition version 0.23.3 and work only with platform version 4.0.X.
    - The provided exercise definitions are of definition version 0.24.7 and work only with platform version 5.0.X.
    - The exercise definitions are **incompatible** with the editor.
    - If you want to edit the following exercise definition, you might find our [VSCode Extension](vscode-extension.md) useful.

---

| Definition Name            | Needs Instructor | Language | Goal                                                                                                                                                                                                                                       | Download                                                                                                                                            |
| -------------------------- | ---------------- | -------- | ------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Introductory Definition    | NO               | English  | Platform tutorial.                                                                               | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/intro-definition.zip?ref_type=heads&inline=false){ .md-button }           |
| Showcase Definition        | YES              | English  | Demonstrate platform capabilities through a personally identifiable information breach scenario. | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/showcase-definition.zip?ref_type=heads&inline=false){ .md-button }        |
| Phishing Uni               | YES              | English  | Train phishing handling at University.                                                           | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/phishing-uni.zip?ref_type=heads&inline=false){ .md-button }               |
| Phone Loss                 | Non-essential    | English  | Train response to loss of mobile device.                                                         | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/phone-loss.zip?ref_type=heads&inline=false){ .md-button }                 |
| Insider Threat             | NO               | English  | Train insider threat response from detection to mitigation.                                      | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/insider-threat.zip?ref_type=heads&inline=false){ .md-button }             |
| Security Training Call     | NO               | Czech    | Train recognition and response to social engineering and deepfakes.                              | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/security-training-call.zip?ref_type=heads&inline=false){ .md-button }     |
| Security Training Notebook | NO               | Czech    | Train log analysis to detect unauthorised access.                                                | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/security-training-notebook.zip?ref_type=heads&inline=false){ .md-button } |
| Security Training Phishing | NO               | Czech    | Train phishing email identification and reporting.                                               | [Download](https://gitlab.fi.muni.cz/inject/inject-docs/-/raw/dux/files-from-repos/security-training-phishing.zip?ref_type=heads&inline=false){ .md-button } |
| -------------------------- | ---------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------- |
| Insider Threat             | NO               | English  | Enhance participants' ability to evaluate risks, respond effectively to security incidents, and address organizational vulnerabilities.                                                                                                    | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/insider-threat.zip?ref_type=heads){ .md-button }             |
| Introductory Definition    | NO               | English  | Teach exercise participants how to use the INJECT Exercise Platform.                                                                                                                                                                       | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/introductory-definition.zip?ref_type=heads){ .md-button }    |
| Phishing Uni               | YES              | English  | Prepare exercise participants to handle a phishing incident.                                                                                                                                                                               | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/phishing-uni.zip?ref_type=heads){ .md-button }               |
| Phone Loss                 | NO               | English  | Help people understand the potential impact of losing a mobile phone and know what to do if it happens.                                                                                                                                    | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/phone-loss.zip?ref_type=heads){ .md-button }                 |
| Ransomware Rezonio         | NO               | Czech    | Participants will propose ways to reduce and assess the risk of a ransomware attack.                                                                                                                                                       | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/ransomware-rezonio.zip?ref_type=heads){ .md-button }         |
| Remote Workers             | NO               | English  | Raising awareness and encouraging the use of approved tools, organizations can protect data integrity, ensure compliance with legal and regulatory requirements, and reduce vulnerabilities associated with remote and collaborative work. | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/remote-workers.zip?ref_type=heads){ .md-button }             |
| Security Training Call     | NO               | Czech    | Help people understand selected social engineering and deepfake techniques; help them to learn how to identify a deepfake video and how to react, while not falling for a scam phone call.                                                 | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/security-training-call.zip?ref_type=heads){ .md-button }     |
| Security Training Notebook | NO               | Czech    | TTX Notebook has participants analyze logs after leaving a computer unlocked to prevent misuse.                                                                                                                                            | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/security-training-notebook.zip?ref_type=heads){ .md-button } |
| Security Training Phishing | NO               | Czech    | TTX Phishing teaches users to identify and report phishing emails.                                                                                                                                                                         | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/security-training-phishing.zip?ref_type=heads){ .md-button } |
| Showcase Definition        | YES              | English  | Prepare the CSIRT of XRAY for handling PII breach.                                                                                                                                                                                         | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/showcase-definition.zip?ref_type=heads){ .md-button }        |
| Supply Chain               | NO               | Czech    | Participants will propose ways to reduce risks in supplier management and compare supplier-related issues and challenges according to their degree of impact.                                                                              | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/supply-chain.zip?ref_type=heads){ .md-button }               |
| Threat Modeling            | NO               | English  | To introduce participants to the foundational concepts of threat modeling and its relevance to maritime cybersecurity.                                                                                                                     | [Download](https://gitlab.fi.muni.cz/inject/definitions/definition-registry/-/raw/main/threat-modeling.zip?ref_type=heads){ .md-button }            |
+18 −0
Original line number Diff line number Diff line
# Visual Studio Code Extension

## Information

This page contains information about an extension that can be installed in **Visual Studio Code** and used for developing IXP exercise definitions. Visual Studio Code is an enhanced text editor featuring extensive language support, along with options for extensions that can add additional support for specific languages and settings files, such as exercise definitions. The extension provides syntax checking and multiple commands to enhance your design experience and minimize the number of mistakes made during exercise definition editing.

## Installation

1. [Install Visual Studio Code](https://code.visualstudio.com/)
2. In Visual Studio Code, in the left panel, click on the Extensions icon.
3. In the Extension tab, search for `IXP-Definition` and click **Install**.
4. Install any required extensions, if necessary - *YAML Language Support by Red Hat*.

**You have successfully installed the extension**

## More information

- For more information see **[IXP-Definition](https://marketplace.visualstudio.com/items?itemName=inject-muni.ixp-definition)** on Visual Studio Code Marketplace.
+23 −0
Original line number Diff line number Diff line
@@ -16,6 +16,29 @@ Most significant changes between the releases are listed below.**

---

## 4.0.1 (Frontend)

- toolbar moved to the right side in the trainee view for better accessibility
- fixed an issue where the email overlay in instructor view would close unexpectedly
- added information about the recipients for emails in the instructor TODO-list
- when switching between teams in instructor view, the same page now remains selected
    (e.g., emails, questionnaires)

## 4.0.1 (Frontend)

- toolbar moved to the right side in the trainee view for better accessibility
- fixed an issue where the email overlay in instructor view would close unexpectedly
- added information about the recipients for emails in the instructor TODO-list
- when switching between teams in instructor view, the same page now remains selected
    (e.g., emails, questionnaires)

## 4.0.2 (Backend)

- fixed an issue where files uploaded by trainees during an exercise were not deleted from
    the database when the exercise was deleted
- fixed an issue where exercise logs could contain uploaded files that were not actually uploaded
    during the exercise, see [known issues](known-issues.md#log-export) for more details.

## 4.0.1 (Backend)

- the database connection is now automatically closed when an exercise loop stops/finishes,
+8 −0
Original line number Diff line number Diff line
@@ -40,6 +40,14 @@ this documentation will equip you with the tools and knowledge needed for succes

!!! News

    *November 18*, 2025 <br>
    Frontend version 4.0.1 is now available with UI improvements and bug fixes.
    [Changelog](changelog.md#401-frontend)

    *October 20*, 2025 <br>
    Backend version 4.0.2 is now available with fixes to exercise deletion and exercise log export.
    [Changelog](changelog.md#402-backend)

    *September 24*, 2025 <br>
    Backend version 4.0.1 is now available with improved database connection handling,
    a new environment variable and reduced log spam. [Changelog](changelog.md#401-backend)
Loading