eHs FULL SPECTRUM SPACE CYBERSECURITY PROFESSIONAL
OUTLINE
  • M1: Concept of Operations
  • M2: Contextualized Threat Modeling
  • M3: Converged Detection Engineering
  • M4: Incident Response Preparedness
  • M5: Adversary Management
  • M6: Space Operations Exercise
  • M7: Guidance Modes Exercise
  • M8: Payload Operations Exercise
  • M9: Contested Space Operations
  • M10: Incident Response Exercise
1 / 10
CONTESTED SPACE OPERATIONS
Cross-Domain: Kinetic + Electronic Warfare
Correlate concurrent threats across two exposure domains
60 Minutes | 10 min instruction + 40 min simulation + 10 min break
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
LABS Learning Objectives
Learn, Apply, Build, Simulate
LABS ComponentTypeStatement
(L)EARNKnowledgeKnowledge of multi-domain adversary campaign tactics combining Kinetic and Electronic Warfare exposure domains.
(L)EARNKnowledgeKnowledge of cross-domain indicator correlation techniques for identifying coordinated adversary operations.
(A)PPLYSkillSkill in correlating indicators across two exposure domains to identify temporal and targeting patterns.
(A)PPLYSkillSkill in assessing co-orbital object proximity data and Electronic Warfare jamming timing to determine coordination.
(B)UILDAbilityAbility to analyze two simultaneous threat indicators from different domains and determine whether they represent a coordinated campaign or independent events.
(S)IMULATETaskCorrelate a co-orbital maneuvering event with concurrent Electronic Warfare jamming to attribute a coordinated campaign within the 40-minute exercise window.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Exercise Scenario Briefing
This is the first multi-domain exercise. Students face two concurrent events that individually look explainable but together reveal coordination. A co-orbital object begins maneuvering near constellation assets while Electronic Warfare jamming targets the primary command uplink. Students must assess each event independently, then connect them to identify a coordinated adversary campaign.
  • Co-orbital inspector satellite maneuvering near assets
  • EW jamming on primary uplink during command window
  • Both events have plausible independent explanations
  • Timing and targeting convergence reveals coordination
  • Event 1: Co-orbital inspector assessment
  • Event 2: EW jamming during command window
  • Cross-domain correlation challenge
  • Instructor guidance for multi-domain analysis
The step from single-domain to multi-domain analysis is where most operators struggle. Each event looks routine in isolation.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Event 1: Co-Orbital Inspector Maneuvering
Kinetic Exposure Domain
A co-orbital object maneuvers to within close proximity of constellation assets. Students must assess whether the maneuvering represents routine orbital maintenance, a commercial inspection service, or hostile intent. The proximity assessment requires evaluating relative velocity, approach geometry, and historical orbital behavior.
  • Co-orbital object changes orbit to approach constellation satellite
  • Relative velocity and approach geometry suggest deliberate rendezvous
  • No prior notification or coordination through standard channels
  • Intent assessment: routine inspection, commercial service, or hostile approach?
  • Instructors guide students through the proximity assessment process
KINETIC ASSESSMENT
A co-orbital object in close proximity has Kinetic potential regardless of declared intent. Proximity is the precursor to all physical-domain threats.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Event 2: EW Jamming Timed to Command Window
Electronic Warfare Exposure Domain
Coordinated jamming targets the primary uplink frequency during the scheduled command window while the co-orbital object is in proximity. Students must switch to backup frequency to restore command authority, then connect the timing of the jamming to the co-orbital positioning. The convergence of timing and targeting reveals deliberate coordination.
  • Primary uplink frequency shows elevated noise floor
  • Command acknowledgments cease during scheduled window
  • Jamming onset coincides with co-orbital closest approach
  • Backup frequency remains clear (targeted jamming, not broadband)
  • Detect uplink degradation through command timeout
  • Switch to backup uplink frequency
  • Confirm command authority restored
  • Correlate jamming timing with co-orbital proximity
ELECTRONIC WARFARE
EW — Denial of the electromagnetic spectrum through jamming, spoofing, or interference. The adversary controls what you can and cannot communicate.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Cross-Domain Correlation Challenge
Connecting the Two Events
The critical analytical step in this exercise is connecting Event 1 (co-orbital maneuvering) with Event 2 (EW jamming). Individually, each event has a plausible innocent explanation. Together, the timing and targeting convergence reveals a coordinated campaign designed to deny command authority while placing a physical threat in proximity.
  • Event 1 alone: could be routine orbital maintenance or commercial inspection
  • Event 2 alone: could be unintentional interference or equipment malfunction
  • Together: timing convergence (jamming during closest approach) reveals coordination
  • Targeting convergence: both events affect the same constellation asset
  • Single-domain monitoring would miss the coordinated campaign
This is the fundamental lesson of cross-domain analysis: adversaries coordinate across domains precisely because single-domain monitoring is the norm.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Feedback Requested from Zendir
The following questions will help finalize this exercise design. We welcome any additional recommendations.
  • Can your platform inject concurrent events across different domain simulations?
  • Is co-orbital object tracking and proximity assessment supported?
  • Can EW jamming be simulated on specific uplink frequencies with realistic signal degradation?
  • How do you recommend presenting a cross-domain correlation view for students?
  • Can event timing be precisely controlled to enable the correlation discovery?
COLLABORATION
Scenario design is open for Zendir’s input. We want exercises that work well on your platform.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Instructor Guidance & Exposure Domain References
Kinetic + Electronic Warfare
Instructors should guide students through the multi-domain analysis process, ensuring they assess each event independently before attempting correlation.
Physical destruction or disabling through direct force. Co-orbital objects represent latent Kinetic capability. Proximity is the precondition for physical-domain action.
Denial, degradation, or exploitation of the electromagnetic spectrum. Jamming denies command authority at the moment it is most needed. Targeted jamming (single frequency) indicates adversary knowledge of your communications plan.
INSTRUCTOR NOTE
Let students struggle with the correlation before guiding them. The discovery moment is the most valuable part of the exercise.
SCORP² Practitioner | eHs®TLP-GREEN
MODULE 9 — CONTESTED SPACE OPERATIONSSCORP²
Exercise Summary
EventDomainFocus
Event 1KineticCo-orbital inspector proximity assessment
Event 2Electronic WarfareEW jamming during command window
CorrelationCross-DomainTiming and targeting convergence analysis
Students completing this exercise will have performed their first multi-domain threat analysis, correlating indicators across Kinetic and Electronic Warfare domains. Module 10 is the capstone: three concurrent domains (Kinetic + Cyber + EW) with a full incident response lifecycle.
SCORP² Practitioner | eHs®TLP-GREEN
Module 9 Complete
  • Assessed a co-orbital inspector maneuvering event (Kinetic domain)
  • Responded to EW jamming timed to the command window (Electronic Warfare domain)
  • Correlated cross-domain indicators to identify a coordinated campaign
Next: Module 10 — Incident Response Exercise (Capstone: Kinetic + Cyber + EW)
VIDEO
VIDEO FEED STANDBY
MISSION STATUS
STUDENT
SECTIONSession 9 — Contested Operations
START00:00
REMAINING