interpol
"Within the technical training participants had to deal with a targeted attack which in real life would jeopardise company reputation and data. First, the teams practised containing the attack in real time, then investigated the incident, and finally, composed a dossier of the information gathered for INTERPOL to help them launch an investigation and prevent similar attacks in the future."
https://www.weforum.org/projects/cyber-polygon