Skip to content

Courses & Labs

Browse everything

Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue

Filters 2

Filter results

Duration: 30–60 minTopic: Blue TeamClear all

149 results — showing 101–149

Hands-on labStationX Infrastructure Labs

Governance and Compliance Evidence CollectionSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will apply governance and compliance concepts through technical evidence.

Hands-on labStationX Infrastructure Labs

Harden a JumpBox for Secure AdministrationSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will harden a JumpBox that is used for administrative access.

Hands-on labStationX Membership

Host Identification Scanning via WindowsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Scanline, a Windows network discovery and mapping tool, to identify the systems on a network of responsibility.

Hands-on labStationX Membership

Host Identification Scanning with LinuxCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool to identify the systems on a network of responsibility.

Hands-on labStationX Infrastructure Labs

Hunt Threats Using Intelligence and Rule-Based DetectionSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will conduct a targeted threat hunt by using real tools and pre-staged telemetry.

Hands-on labStationX Membership

Identify Access to a LINUX Firewall Through SYSLOG ServiceCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will identify access to a PFSENSE firewall through the forwarding of SYSLOG (System logs) from a Firewall to the SYSLOG service we have configured and set up on the Network.

Hands-on labStationX Membership

Identify Rootkit and DLL Injection ActivityRootkits & Threat DetectionDuration: 1 hStudents will use Olly Debugger to debug a suspect program and determine if any of the observed behavior is malicious or not.

Hands-on labStationX Membership

Identifying Anomalous ARPRootkits & Threat DetectionDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with identifying anomalous ARP traffic.

Hands-on labStationX Membership

Implement Single System Changes in FirewallCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will gain practical experience configuring a pfSense firewall to control and secure network traffic.

Hands-on labStationX Infrastructure Labs

Implement TLS and Certificate Controls for a ServiceSecurity Operations PractitionerLevel: GuidedDuration: 1 h"In this lab, you will secure a service using TLS and certificates.

Hands-on labStationX Membership

Lab Environment Orientation - *** (Start Here!) ***Cyber Defense Forensics Analyst Training SeriesDuration: 1 hThe purpose of this lab is to allow you to familiarize yourself with the lab virtual environment.

Hands-on labStationX Membership

Linux AnalysisMalware Analysis & Reverse Engineering Duration: 1 hIn this lab, students will use Exterro’s Forensic Toolkit (FTK) to perform foundational digital media analysis on a provided disk image.

Hands-on labStationX Membership

Live Imaging with FTK Imager LiteCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use FTK Imager Lite to create a forensic image of a Windows 8 workstation.

Hands-on labStationX Membership

LNX101 - OpenSSH Installation, Configuration, and HardeningCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will learn how to install, configure, harden and test an OpenSSH server.

Hands-on labStationX Membership

LNX101 - Setting Up a Firewall With UFW and FirewalldCyber Defense Forensics Analyst Training SeriesDuration: 1 hSetup a firewall on Linux Duration: 1 hour

Hands-on labStationX Membership

LNX101 - Telnet vs. SSHCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will learn how to use telnet, an insecure protocol that sends its data over the network in an unencrypted form.

Hands-on labStationX Membership

Log AnalysisMalware Analysis & Reverse Engineering Duration: 1 hIn this lab students will have the opportunity to review various log files associated with the Windows operating system.

Hands-on labStationX Membership

MAC AnalysisMalware Analysis & Reverse Engineering Duration: 1 hStudents will use this lab to become familiar with locations of data on a MAC Image.

Hands-on labStationX Membership

Man In the Middle Crypto AttackRootkits & Threat DetectionDuration: 1 hStudents will be placed in the middle of an encrypted chat session.

Hands-on labStationX Membership

Manually Analyze Malicious PDF DocumentsCyber Defense Forensics Analyst Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.

Hands-on labStationX Membership

Manually Analyze Malicious PDF Documents 2Cyber Defense Forensics Analyst Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.

Hands-on labStationX Membership

Memory Extraction and AnalysisCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis is one of the labs for the Advanced Digital Media Forensics class.

Hands-on labStationX Membership

Metadata Extraction LabForensic Investigations and Evidence HandlingDuration: 1 hIn this lab, students will understand what Metadata is and learn a tool to use to identify it.

Hands-on labStationX Membership

Nessus Scanning and ReportingCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis exercise will introduce trainees to the advanced settings within the Nessus Vulnerability Scanner.

Hands-on labStationX Membership

PAM LabCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis lab exercise is designed to allow trainees to remotely access a virtual machine using SSH to create a user account and assign the user account permissions on the virtual machine.

Hands-on labStationX Membership

Parse Files Out of Network TrafficCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis lab teach students how to extract various files from network traffic using Network Miner and Wireshark.

Hands-on labStationX Membership

Participate in Attack Analysis Using Trusted Tool SetCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will participate in attack analysis/incident response, including root cause determination, to identify vulnerabilities exploited, vector/source and methods used (e.g., malware, denial of…

Hands-on labStationX Membership

Personal Security ProductsRootkits & Threat DetectionDuration: 1 hAnti-virus (AV) programs are software designed to detect and quarantine programs that are deemed malicious.

Hands-on labStationX Infrastructure Labs

Prioritize Risks and Implement One RemediationSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will perform practical risk management by using staged technical findings.

Hands-on labStationX Membership

Protect Against BeaconingCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will take a PCAP indicating the presence of a beacon on the network and analyze it.

Hands-on labStationX Infrastructure Labs

Reduce DVWA Exposure by Using Compensating ControlsSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will reduce risk from a vulnerable DMZ web application using compensating controls.

Hands-on labStationX Membership

Remove TrojanMalware Analysis & Reverse Engineering Duration: 1 hIn this lab, the student will execute a defined response plan to identify and remove a Trojan virus from a Windows environment using Windows Security Essentials.

Hands-on labStationX Membership

Rogue Device Identification and BlockingCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will scan a network and identify rogue devices.

Hands-on labStationX Membership

Scanning From WindowsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Scalnline, a windows network discovery and mapping tool, to identify the systems on a network of responsibility.

Hands-on labStationX Membership

Scanning with NmapCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will perform several scans but, using Wireshark, you will be able to view the scan traffic to see what the tool is actually doing under the hood.

Hands-on labStationX Infrastructure Labs

Secure Privileged Access and Auditing in Active DirectorySecurity Operations PractitionerLevel: GuidedDuration: 1 h"In this lab, you will improve identity security in Active Directory.

Hands-on labStationX Membership

Securing Linux - FirewallsCyber Defense Forensics Analyst Training SeriesDuration: 1 hFirewalls are an important part of limiting network traffic.

Hands-on labStationX Membership

Securing Linux for System AdministratorsCyber Defense Forensics Analyst Training SeriesDuration: 1 hLinux environments are ubiquitous in many different sectors, and securing these environments is as important as securing Windows environments.

Hands-on labStationX Membership

Snap ExploitCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn January 2019, a local privilege escalation vulnerability was discovered in Ubuntu's snapd service.

Hands-on labStationX Membership

Snort Signatures, IDS Tuning, and BlockingCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hOften the security analyst will need to update the existing IDS/IPS (Intrusion Detection/Prevention System) to handle new threats.

Hands-on labStationX Membership

Specialized Linux Port ScansCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Hping3 to assess ports of various devices on the assigned network.

Hands-on labStationX Infrastructure Labs

Threat Modeling to Controls: Identify Risks and Implement MitigationsSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will threat-model a system in the given environment and implement a mitigation.

Hands-on labStationX Infrastructure Labs

Triage, Contain, and Automate Incident ResponseSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will investigate and respond to an incident by using real tools and pre-staged artifacts in the environment.

Hands-on labStationX Membership

Tweaking Firewall Rules for DetectionCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use organizational firewall for monitoring, detecting and auditing traffic on the network.

Hands-on labStationX Membership

Use pfTop to Analyze Network TrafficCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use pfTop, a network traffic monitoring/statistics plugin used in pfSense, to analyze and monitor network traffic.

Hands-on labStationX Membership

VirtualizationForensic Investigations and Evidence HandlingDuration: 1 hThis lab is designed to provide students with the experience of creating a simple virtual machine (VM) using VMware Player.

Hands-on labStationX Membership

Whitelist IP Address from IDS AlertsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will whitelist the approved scanning device so that no security alerts are generated from the host.

Hands-on labStationX Membership

Windows Event Log Manipulation via Windows Event ViewerCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab you will use Windows Event Viewer to view and filter the security event log on a Windows 11 client computer specifically for account logons.

Hands-on labStationX Membership

WiresharkCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will gain a foundational understanding of network traffic analysis using Wireshark.