Ransomware operations (Wizard Spider/Ryuk/Conti) and destructive attacks (Sandworm/NotPetya) - Most complex evaluation to date - Included data destruction and ransomware scenarios - 30 vendors participated