The incident response table-top exercise proved extremely valuable in testing our detection capabilities, containment strategies, and recovery processes. The exercise simulated a network compromise scenario involving an insider threat, lateral movement through the network, and potential ransomware deployment. Our incident response process worked exceptionally well, with the vigilance of users at every step demonstrating the strength of our security posture. The exercise highlighted the importance of continued testing and practice to maintain readiness against evolving threats.