Students can either re$-$create, use an existing, or assume the red team attack vector $($e$.$g$.$ phishing, lateral movement, PCAPs, etc.$),$ but you should provide some documentation on what the attack looks like from the outside entity.