Learn from CrowdStrike

When a Security Update Goes Wrong: The CrowdStrike BSOD Outbreak

In 2020, a faulty threat intelligence update from CrowdStrike triggered a Blue Screen of Death on millions of Windows endpoints. Incident Drill offers a safe environment to practice responding to similar high-stakes incidents and prevent future disasters.

CrowdStrike | 2020 | Bug/Outage (Endpoint Security)

Practice This Scenario →

The Endpoint Security Nightmare

Endpoint security is critical, but updates can be dangerous. A single bug can cause widespread outages, impacting millions of users. Teams need to be prepared to quickly identify, contain, and resolve these issues to minimize the blast radius and maintain trust.

PREPARE YOUR TEAM

Simulate the Chaos, Master the Response

Incident Drill provides realistic simulations of incidents like the CrowdStrike False Update, allowing your team to practice their response in a safe, controlled environment. We provide the chaos, you practice the calm. Gain real-world experience without the real-world consequences. Build confidence and prevent future catastrophes.

🐛

Realistic Simulations

Experience the pressure of a real incident with meticulously crafted scenarios.

⏱️

Time-Bound Challenges

Learn to prioritize and make critical decisions under pressure.

🧑‍💻

Team Collaboration

Improve communication and coordination within your engineering teams.

📊

Detailed Analytics

Track performance, identify weaknesses, and measure improvement over time.

📚

Post-Incident Review

Analyze the incident, discuss learnings, and refine your incident response plan.

🛡️

Customizable Scenarios

Tailor simulations to your specific infrastructure and security landscape.

WHY TEAMS PRACTICE THIS

Become Incident-Ready

✓ Reduce Mean Time To Resolution (MTTR)
✓ Improve Incident Response Team Coordination
✓ Enhance Root Cause Analysis Skills
✓ Minimize the Impact of Future Outages
✓ Strengthen Endpoint Security Posture
✓ Build Confidence in High-Pressure Situations

Incident Timeline

2020-03-13 00:00 Threat intelligence update released.

2020-03-13 00:15 Reports of BSOD (Blue Screen of Death) start surfacing.

2020-03-13 00:30 Incident declared. Investigation begins. Critical

2020-03-13 01:00 Root cause identified: out-of-bounds memory read.

2020-03-13 01:30 Remediation released. Rollback initiated. Resolved

How It Works

Step 1: Identify the Problem

Recognize the symptoms and impact of the buggy update.

Step 2: Contain the Outbreak

Implement measures to stop the spread of the BSOD.

Step 3: Analyze the Root Cause

Investigate the code and identify the faulty logic.

Step 4: Deploy a Fix

Release a patched update and rollback the faulty version.

EXPLORE MORE

Related Incidents

Ready to master incident response?

Join the Incident Drill waitlist and be among the first to experience realistic incident simulations. Prepare your team for anything.

Get Early Access →

✓ Founding client discounts ✓ Shape the roadmap ✓ Direct founder support