An official website of the United States government
A .mil website belongs to an official U.S. Department of Defense organization in the United States.
A lock (lock ) or https:// means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

Home : News : Article View
NEWS | Jan. 19, 2023

Maryland ANG Certifies Cyber Protection Team on Live Network

By Master Sgt. Christopher Schepers, 175th Wing, Maryland Air National Guard

MIDDLE RIVER, Md. - Members of the Maryland Air National Guard’s 275th Cyberspace Operations Squadron recently became the first cyber operators in the Air National Guard to certify a Cyber Protection Team using their weapon system on a live base network during real-world missions.

As part of the U.S. military’s Cyber Mission Force, CPTs are defensive. These teams were created to hunt existing network threats and defend against attacks by finding and mitigating potential vulnerabilities in critical infrastructure, systems or platforms.

“We operate the cyber vulnerability assessment hunter weapon system,” said Capt. Ashley Oates, 275th COS flight commander and mission element lead for the certification event. “It is a toolkit that does exactly what it says, in that it is a vulnerability assessment toolkit that has capabilities for both network analysis and host analysis.”

Typically, the process for certification of a CPT is completed entirely in a virtual environment where tasks are controlled and the flow of information received by operators is manufactured. By certifying on a live Department of Defense network, the operators could perform the certification tasks using real-time data.

“What was so important for this certification event is that we were exposed to real-life patterns that we don’t get in a typical training environment,” Oates said. “The training environment can replicate real life, but when you’re on a network that is connected to people operating on it and performing their day-to-day operations, we are able to see exactly what is going on in a specific time span.”

Oates said during this certification event, her Airmen could see both “human-to-human information flow” and any “machine interaction” occurring on the network, which helped her team develop better tactics, techniques and procedures.

“It’s just like looking at Interstate 95. You can tell when there is a backup and when it is smooth sailing,” Oates said. “That is what we could see on the network. We could see if there was a bottleneck in the data flow, and having that natural occurrence of data flow gave us the ability to learn something new every time we were on it.”

For cyberspace operation groups in the ANG, the 119th Cyberspace Operations Group from the Tennessee ANG is the tasking authority for CPTs to initiate a certification event.

“When it comes to certifying a CPT, the idea is to organize one mission element and run through the certification process,” Oates said. “CYBERCOM outlines the requirements for certification, and once the team has met all standards, they can actually perform the function of a CPT.”

A CPT tests itself on the ability to perform the core tasks of a high-functioning cyber team: hunting, enabling, hardening and assessing.

“We are tested on 53 joint mission essential tasks that have to be met for us to become a certified cyber protection team,” Oates said. “Starting with the tasking authority, you have to partner with external agencies to ensure success during a certification event. You need to know who to work with at higher headquarters and actively engage with internal partners for support during the event.”

In addition to the 119th COG, the 275th COS worked with multiple partners to ensure that the certification event was successful.

“The 275th Operations Support Squadron and the 175th Communications Flight were an integral part to the team’s success throughout this certification event,” Oates said. “The 275th OSS were our validators during this event and ensured we were completing the certification tasks correctly. The 175th Communications Flight provided communications support and made sure that we had a thorough understanding of the communications infrastructure for the base locally.”

Col. Jason Barrass, 175th COG deputy commander, said it was challenging for the Airmen of the 275th COS to plan effectively.

“To get this done, they created all of the memorandums of agreement and received the appropriate authorization through the National Guard Bureau, the 299th NOSC [Network Operations Squadron], and our communications flight,” Barrass said. “With all of that in place, they partnered with those entities to look at one specific area on base and their network and essentially demonstrated their ability to do some of their critical missions skills live on the network.”

The 275th COS can now utilize its weapon system and assist during a real-world deployment.

“Now that we have certified as a CPT and we are in our window for activation, we are excited to be able to go out and execute the mission that we are trained to do,” Oates said.

 

 

Related Articles
Maryland Air National Guard Lt. Col. Steven Montalvo, 175th Wing inspector general and A-10 pilot for the 104th Fighter Squadron, gestures farewell to fellow Guard members while taxiing to the runway in the A-10C Thunderbolt II aircraft 705 at Warfield Air National Guard Base at Martin State Airport, Maryland, March 26, 2025. The aircraft was the first to be sent from the 175th Wing to the boneyard at Davis-Monthan Air Force Base, Tucson, Arizona, as part of the initial process of divesting the Maryland Air National Guard A-10C Thunderbolt II fleet.
Maryland Air National Guard Begins Divesting A-10s
By Maj. Benjamin Hughes, | March 27, 2025
MIDDLE RIVER, Md. - The Maryland Air National Guard divested an A-10C Thunderbolt II aircraft at Warfield Air National Guard Base at Martin State Airport March 26.The U.S. Air Force announced in March 2024 a plan for the...

Tech. Sgt. Joseph Charron, Warrant Officer Training School military training instructor, observes Warrant Officer Training School class 25-01 as they compete in a push-up challenge at Maxwell Air Force Base, Alabama, Oct. 25, 2024.
Maryland Air Guardsmen Chosen for Warrant Officer Course
By Master Sgt. Christopher Schepers, | Nov. 14, 2024
MIDDLE RIVER, Md. - Four Maryland Air National Guard Airmen selected for the first U.S. Air Force Warrant Officer Training Class in over 60 years started the initial cohort in October at Maxwell Air Force Base, Alabama.The...

U.S. Air Force Staff Sgt. Jonathan Bandy, 175th Logistics Readiness Squadron vehicle maintenance craftsman, conducts pre-inspection procedures during Operation Baltic Rhino Sept. 14, 2024, at the Eametsa military base, Parnu, Estonia. Operation Baltic Rhino provided an opportunity to exchange convoy knowledge and tactics with Estonian counterparts, underscoring the commitment of the Maryland National Guard and its partners to maintaining effective joint logistical operations, interoperability, and readiness on a global scale.
Maryland Airmen Train with Logistics Counterparts in Estonia
By Staff Sgt. Laura Virtue, | Sept. 25, 2024
PARNU, Estonia - Eight Maryland Air National Guard Airmen partnered with Estonian Defense League members to conduct Operation Baltic Rhino, a convoy operations training exercise, Sept. 13-15 at the Eametsa military base in...