EGI CSIRT will participate at International Symposium of Grids and Clouds. Together with eduGAIN CSIRT, EGI CSIRT will run an Incident Response table top exercise where participants will have to take on the roles of IdP, SP, Federation Operators and solve a fictitious incident using the available procedures. In the afternoon, after an introduction to forensics, participants will have to solve the puzzles that the EGI CSIRT created for the last SSC.