This certifies that the participant has successfully completed Operation Blueprint Diffusion, demonstrating advanced capability in leading and contributing to high-stakes incident response within complex enterprise environments. Throughout the exercise, the participant operated in a crisis-response context, identifying initial compromise vectors, coordinating the investigation of attacker activity across distributed systems, and assessing the progression of persistence, lateral movement, and credential abuse. They demonstrated strong judgment in correlating intelligence from multiple data sources, directing analysis of compromised infrastructure and endpoints, and evaluating operational and business impact — including risks to internal systems and development pipelines. The scenario further addressed modern threats targeting CI/CD environments and software supply chains, reflecting adversary tactics focused on stealth, persistence, and long-term strategic access. Overall, the exercise validated the participant’s ability to operate effectively at a high level during complex incidents — driving investigations, understanding attacker behavior, and supporting coordinated response efforts across both Windows and Linux environments.