The results from Phase II will be announced, and the winning teams from Phase I and Phase II will be invited on the Main Stage for an award ceremony and interview.
A second set of PCAP files will be presented to contestants on Thursday morning. These PCAP files will include a variety of new communication that was not seen in the Phase I communication. The Phase II PCAPs will include a variety of attacks as well as new valid process communication that may be due to changes in the ICS or non-standard activities in the ICS.
Teams will win points by correctly identifying activity, again with additional points being earned based on specificity and timeliness of the results.