Inside the Range: A Running Operational Record

This course introduced the students to how cyberspace operations assist and support Law Enforcement Agencies (LEA) in developing intelligence into evidence, with supporting staff from Military and Intelligence (MILINT), as well as civilian Individual Augmentees (IA). Each entry below marks a stage in that training and links to the document that would be involved in a real world operation, allowing students to learn the Intelligence and CNO document cycle.

The first document students are introduced to is the Acronyms and Lingo that we utilize during such operations.

Even though by now the Op is codenamed Operation Long Distance Proverbs (OLDP), the students are told to assume that this is not the case because such a codename is assigned much later in the operational planning phase.


The same document is usually issued to other students and tailored for each classroom's operation according to the storyline on every range we train worldwide.

As planned for the storyline, the first document injected into the CNO documentation flow is a request from State House, Nairobi, from a Cyber Security team that scans Twitter or X accounts, for the Presidential Communication Service.


This triggers a Threat Intelligence report that is presented to the DCI and NIS for deliberation.

Then a information request from the DCI for information associated with the X account will commence, where KE-CIRT can now retrieve that information from X for further investigation.
The requested information includes the email addresses registered to the account and the IP addresses used to access the X account.


The requested information includes the email addresses registered to the account and the IP addresses used to access the X account.