ADGM Academy

Discover who we are, what drives our mission, and how we empower talent through industry partnerships, innovative learning, and programmes that strengthen the region’s financial and business landscape.

Read more
Featured Highlights ADGM Academy Host High Level Roundtable on the Future Financial Workforce Under the patronage of Theyab bin Mohamed bin Zayed, 15 UAE Nationals to join National Talent Development with World Bank Group Explorers Program
ADGM Academy Schools

Explore ADGM Academy’s schools, where industry aligned programmes, expert led learning, and practical skill development come together to prepare professionals for success in today’s fast evolving business landscape.

Explore all ADGM Academy Schools
Featured Schools Developing expertise for the evolving world of sustainable finance Preparing professionals to lead in evolving treasury and risk functions
Explore our Programmes

Explore a wide range of industry aligned programmes designed to build future ready skills, support professional growth, and empower individuals and organizations to thrive in today’s rapidly evolving financial and business landscape.

Explore our Programmes
Featured Highlights Delivering structured assessments that strengthen capability and guide professional growth Modern facilities equipped to host impactful meetings and events
Explore our Tech Centre

Abu Dhabi’s multi-sector innovation hub – a first-of-its-kind ecosystem that fuses education, research, regulation, and investment under one roof. We bring together policymakers, regulators, industry leaders, researchers, and entrepreneurs to shape the technologies and industries of tomorrow.

Explore more
Latest Publications Quantum Computing in Digital Capital Markets Blueprints for the Future: RealAssetX Abu Dhabi Innovation Showcase
Explore our Knowledge Library

Our research focuses on five strategic themes that are redefining the future of financial services and the broader economy. Through authoritative papers, insights, and reports, we turn complex challenges into practical knowledge that supports industry leaders, regulators, and entrepreneurs.

Explore more
Upcoming events Financing the Water Transition: Country Water Compacts & National Investment Platforms Governance Strategies for Modern Family Offices Financing the Water Transition: Blended Finance & Water Investment Structures
Cyber Arena

LockBit Ransomware Programme

Tech Centre Cyber Arena LockBit Ransomware Programme

Programme Overview

The LockBit Ransomware programme builds practical, hands-on capability to detect, analyse, and respond to one of the most active and impactful ransomware threats facing organisations today. The training provides a deep dive into LockBit’s ransomware-as-a-service (RaaS) operating model, real-world attack campaigns, and the techniques attackers use to gain access, move laterally, exfiltrate data, and deploy encryption. 

Participants engage in hands-on labs to detect and analyse LockBit variants, identify key forensic artifacts and Indicators of Compromise (IOCs), and apply effective containment and mitigation actions. The programme includes an APT-style investigation where trainees collect evidence, reconstruct the full attack timeline, and trace the ransomware operation from initial access through encryption. 

By combining technical investigation, threat actor tradecraft, and crisis management decision-making, this programme strengthens both operational response and leadership readiness during active ransomware incidents. 

Programme Benefits Programme Modules ADGM Academy ADGM Academy Certificate of Completion One Day
Programme Benefits
Gain practical experience detecting and analysing LockBit ransomware variants.
Understand ransomware-as-a-service (RaaS) models and affiliate operations.
Analyse real ransomware campaigns, attacker behaviour, and negotiation dynamics.
Apply structured containment, recovery, and prevention strategies.
Learn directly from Red Team insights into attacker tradecraft and decision-making.
Who is the Programme for?

This programme is for SOC Analysts, DFIR Analysts, Incident Response team members, Threat Hunters, IT/OT professionals, and senior management (C- and V-level) involved in ransomware preparedness, response, and crisis decision-making. 

Registration Form

Register Now
* Please note: This programme is available only to corporate groups. Individual signups are not eligible.
Learning Modules

Module 1: LockBit Ransomware Overview 

Introduction to LockBit as a ransomware operation, including its RaaS business model, affiliate ecosystem, attack methods, recruitment practices, and notable global campaigns. 

Module 2: Ransomware Case Study – Royal Mail (LockBit 3.0) 

Detailed analysis of the Royal Mail LockBit 3.0 incident, focusing on attack timeline reconstruction, attacker interactions, negotiation considerations, and business impact within the context of recent ransomware trends. 

Module 3: Attacker Tradecraft and Perspective 

Exploration of the attacker’s point of view, including motivations, access techniques, payload delivery methods, and operational security measures used during ransomware campaigns. 

Module 4: Management and Crisis Awareness – LockBit Scenario 

Management-focused discussion of a ransomware incident affecting an organisation, using an APT-based scenario to explore leadership decision-making, organisational response, and crisis management considerations. 

Module 5: Hands-on LockBit Detection and Analysis 

Practical lab where participants detect, analyse, and mitigate LockBit 3.0 ransomware in a controlled environment, identifying key indicators and forensic artifacts. 

Module 6: APT-Style Ransomware Investigation 

Scenario-based investigation tracing a LockBit ransomware attack from initial access through lateral movement, data exfiltration, and encryption. Participants collect evidence and build an attack timeline. 

Module 7: Red Team Debrief and Lessons Learned 

Interactive debrief with the Red Team responsible for the simulated ransomware attack, explaining attacker techniques, tradecraft, and decision points, followed by a Q&A session. 

Programmes You May Be Interested In

Cyber Threat Hunting Programme

The Cyber Threat Hunting programme delivers a practical, end-to-end methodology for conducting modern threat hunting within enterprise security environments.

Cyber Threat Intelligence Programme

The Cyber Threat Intelligence programme is an advanced training designed to help organisations move beyond baseline cybersecurity practices and establish a mature, intelligence-driven security capability.

Cyber-Threats and Defense Essentials Programme

This three-day intensive programme builds foundational and operational cybersecurity capabilities for Operational Technology (OT) and SCADA environments.

Detecting & Mitigating AWS Threats Programme

This programme equips participants with a deep understanding of common AWS security threats and practical techniques for detecting and mitigating attacks in cloud environments.

ICS / SCADA Defensive and Offensive Strategies Programme

This comprehensive five-day programme immerses participants in both defensive and offensive perspectives of ICS and SCADA cybersecurity through intensive hands-on scenarios.

Network Forensics Advanced Programme

The Network Forensics Advanced programme is an intensive, hands-on course designed for professionals who have completed Network Forensics Essentials or possess equivalent experience.

OT Awareness Programme

This programme provides essential cybersecurity awareness for professionals working in or supporting operational technology environments.

Cyber Crisis Management Programme

This programme prepares security leaders and decision-makers to manage cyber crises effectively under real-world pressure.

Incident Response – Principal Tactics Programme

The Incident Response – Principal Tactics programme immerses participants in the tools, skills, and methodologies used by enterprise incident response teams.

Incident Response Essentials for OT Programme

This three-day programme equips OT and SCADA professionals with essential incident response and digital forensics skills tailored for industrial control environments.

Network Forensics Essentials Programme

The Network Forensics Essentials programme develops core network digital forensics capabilities through hands-on analysis of real network traffic in a controlled Cyber Arena environment.

Reverse Analysis for OT Programme

This programme equips trainees with the skills to conduct reverse analysis of OT cyber incidents using structured investigation methodologies.

Reverse Analysis – AWS Programme

This programme equips trainees to conduct reverse analysis of cloud-enabled cyber incidents within AWS environments.

Awareness for Management Programme

This programme is designed to equip senior management and decision-makers with a strategic understanding of modern cyber threats from an attacker’s perspective.

Comprehensive Cyber Training Programme – From Zero to Hero

The Comprehensive Cyber Training Programme – From Zero to Hero is a structured 19-day programme designed to develop job-ready cybersecurity professionals with end-to-end defensive capabilities.

AI for Cybersecurity Programme

AI for Cybersecurity provides a practical, end-to-end view of how artificial intelligence and large language models (LLMs) are transforming both cyber-attacks and cyber defense.

About

Who we are Why ADGM Academy The Alumni Network Leadership Faculty Academy Centres News

Schools

Overview Banking & Finance Digital Assets Digital Literacy Entrepreneurship Law Management National Development Programmes Sustainable Finance Taxation Treasury Wealth & Asset Management

Offering

Qualification Examination Certification & Coaching Digital Learning Platform Venue Booking

Research & Tech

Research Centre Tech Centre Publications Cyber Arena Freedom Investment Lab FutureTech 4.0 EnerTech RealAssetX Abu Dhabi Research Themes Advisory Board

Resources

Events Blogs & News Contact Us Location
© 2026 ADGM. All rights reserved. Terms and Conditions

We use cookies and similar technologies that are necessary to operate the website. Additional cookies are used to perform analysis of website usage. By continuing to use our website, you consent to our use of cookies. For more information, please read our Cookies Policy.

Reject Accept