https://www.theregister.co.uk/2020/01/28/sans_tournaments_commence/

Sponsored Attendees of SANS’ world-class courses consistently rate the hands-on exercises as the most valuable part of the experience. With NetWars, however, SANS has raised the ante with a set of cyber-tournaments that let participants work through a range of challenging levels and master the skills employed by information security professionals.

SANS certified instructor Steve Armstrong, with SANS since 2007, explains how NetWars work. "We have several different types of NetWars Tournaments,” he said. Core NetWars is middle of the road – you're challenged with assignments that cover incident response, system understanding and management, Linux, web compromises, and penetration testing. Meanwhile, DFIR NetWars is much more into evidence-handling.