Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 2
Filter results
Type
- ✓ Hands-on lab 199
Topic
- Azure 425
- Cyber Security Labs 283
- ✓ Blue Team 199
- Essential IT 186
- General Cyber security 157
- Programming 141
- AWS 113
- Data Science 101
- Networking 92
- VMware 80
- Advanced General Cyber Security 47
- Linux 46
- Hacking 43
- Web hacking 27
- Google Cloud 9
- Artificial Intelligence 3
Included in
199 results — showing 101–199
Hands-on labStationX Membership
Windows System Hardening with PowerShellCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 2 hIn this hands-on lab, students will use PowerShell to implement essential Windows system hardening techniques.
Hands-on labStationX Membership
WMI Event PersistenceThreat Intelligence & DefenseDuration: 2 hIn this lab the student will scan a network, compromise a target, pivot into an internal network, establish persistence, and then remove the persistent mechanism as a bonus task.
Hands-on labStationX Membership
Advanced Techniques for Malware RecoveryMalware Analysis & Reverse Engineering Duration: 1 hStudents will use the SysInternals Suite of utilities to analyze processes, DLLs, registry edits and other auto start functions to locate and remove malicious software from an infected Windows 7…Hands-on labStationX Membership
Analysis and Recommendation ReportMalware Analysis & Reverse Engineering Duration: 1 hStudents will do a Vulnerability Assessment on a network.
Hands-on labStationX Membership
Analyze and Classify MalwareMalware Analysis & Reverse Engineering Duration: 1 hIn this lab you will attempt to conduct basic analysis on some malware samples that were found on the internal network.Hands-on labStationX Membership
Analyze DoomJuice Infection to Identify Attack Vector and PayloadMalware Analysis & Reverse Engineering Duration: 1 hStudents will use popular system analysis tools on an infected machine in order to identify signs of infection.Hands-on labStationX Membership
Analyze Malicious Activity in Memory Using VolatilityMalware Analysis & Reverse Engineering Duration: 1 hStudents will use the open source Volatility tool to analyze a memory snapshot and determine what malicious software has infected the victim machine.Hands-on labStationX Membership
Analyze Malicious Network TrafficCyber Defense Forensics Analyst Training SeriesDuration: 2 hStudents will take some time to review malicious traffic within a controlled environment.
Hands-on labStationX Membership
Analyze Packed Executable to Identify Attack Vector and PayloadForensic Investigations and Evidence HandlingDuration: 1 hStudents will use a handful of tools to analyze a provided suspicious file.
Hands-on labStationX Membership
Analyze Structured Exception Handler Buffer Overflow ExploitRootkits & Threat DetectionDuration: 1 hStudents will identify the use of a Buffer Overflow exploit through the use of Wireshark and by analyzing items found in the captured traffic.Hands-on labStationX Membership
Auditing Service AccountsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will audit service accounts in a Windows Server environment.Hands-on labStationX Membership
Baseline Systems in Accordance with Policy DocumentationCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.Hands-on labStationX Membership
BCP DRP and Test PlanningForensic Investigations and Evidence HandlingDuration: 2 hIn this lab, students will gain hands-on experience with key organizational resilience documents, including the Business Continuity Plan (BCP), Business Impact Assessment (BIA), and Disaster…
Hands-on labStationX Membership
Conduct Root Cause Analysis for System CrashesCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hStudents will use utilize a specially loaded system to conduct analysis on a captured memory dump from a machine suffering from repeating system crashes.Hands-on labStationX Membership
Control Assessment and EvaluationCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents start off the lab by reviewing are a list of security controls which are to be applied to systems on a fictitious corporate network.Hands-on labStationX Membership
Creating a Baseline Using AutopsyCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will run Autopsy against an existing system to create a baseline that will be used for future analysis.Hands-on labStationX Membership
Creating a Case in AutopsyForensic Investigations and Evidence HandlingDuration: 2 hIn this lab students will become familiar with creating a lab in Autopsy.Hands-on labStationX Membership
Creating a Case in FTKCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 2 hIn this lab, students will learn how to use Exterro’s Forensic Toolkit (FTK) to perform foundational digital media analysis.Hands-on labStationX Membership
Creating a Case in OSFForensic Investigations and Evidence HandlingDuration: 1 hIn this lab students will become familiar with creating a lab in OSForensics.Hands-on labStationX Membership
Creating a Forensic ImageCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, students will learn how to create a forensic image of a removable media using FTK imager.Hands-on labStationX Membership
Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will create a list of installed programs, services, and accounts in a Windows 2012 server environment using various tools and methods.Hands-on labStationX Membership
Creation of BCP and DRPForensic Investigations and Evidence HandlingDuration: 3 hStudents will be required to create two documents: a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP).Hands-on labStationX Membership
CTF EnvironmentRootkits & Threat DetectionDuration: 8 hThis lab hosts a set of CTF challenges that will be automatically scored.Hands-on labStationX Membership
Denial of Service PCAP AnalysisCyber Defense Forensics Analyst Training SeriesDuration: 1 hThe student will act as attacker and defender in this scenario.
Hands-on labStationX Infrastructure Labs
Design, Defend, and Respond Across an End-to-End Security ArchitectureSecurity Operations PractitionerLevel: ExpertDuration: 1 hIn this lab, you will complete an end-to-end capstone scenario spanning architecture, engineering, monitoring, hunting, and incident response.Hands-on labStationX Membership
Detect Embedded Shellcode in a Microsoft Office DocumentMalware Analysis & Reverse Engineering Duration: 1 hMalware can take many forms.Hands-on labStationX Membership
Detect Unauthorized Changes by Comparing to Approved ConfigurationsRootkits & Threat DetectionDuration: 2 hStudents will use a variety of tools to record and snapshot different aspects of a Windows workstation, and then compare those recent state updates to approved configurations.Hands-on labStationX Infrastructure Labs
Enforce Segmentation and Approved Access PathsSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will enforce segmentation and approved access paths.Hands-on labStationX Infrastructure Labs
Establish a Windows Hardening and Security Logging BaselineSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will harden a Windows endpoint to reduce common attack paths.Hands-on labStationX Infrastructure Labs
Establish centralized logging by onboarding hosts and validating monitoring readinessSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will ensure monitoring readiness through centralized logging.Hands-on labStationX Membership
Event Log Collection with SplunkCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab you will use Splunk Enterprise to ingest logs from a local host for analysis Duration: 2 hoursHands-on labStationX Membership
FTK Analysis & ReportingForensic Investigations and Evidence HandlingDuration: 1 hThe FTK Imaging & Analysis lab is focused on building incident handling skills.Hands-on labStationX Membership
FTK Enterprise Fundamentals and Mobile InvestigationForensic Investigations and Evidence HandlingDuration: 2 hIn this lab, students will use Exterro’s Forensic Toolkit (FTK) to conduct hands-on digital media analysis by investigating a realistic case scenario.Hands-on labStationX Membership
Fundamentals of Malware AnalysisMalware Analysis & Reverse Engineering MAL400 exposes students to the theoretical knowledge and hands-on techniques used to analyze malware.Hands-on labStationX Infrastructure Labs
Govern, Detect, Hunt, and Respond Through an Integrated Security Operations SprintSecurity Operations PractitionerLevel: AdvancedDuration: 1 hIn this lab, you will complete an integrated security operations sprint that combines tasks from labs 8-13.Hands-on labStationX Infrastructure Labs
Governance and Compliance Evidence CollectionSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will apply governance and compliance concepts through technical evidence.
Hands-on labStationX Infrastructure Labs
Harden a JumpBox for Secure AdministrationSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will harden a JumpBox that is used for administrative access.Hands-on labStationX Membership
Host Identification Scanning via WindowsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Scanline, a Windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Host Identification Scanning with LinuxCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool to identify the systems on a network of responsibility.Hands-on labStationX Infrastructure Labs
Hunt Threats Using Intelligence and Rule-Based DetectionSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will conduct a targeted threat hunt by using real tools and pre-staged telemetry.Hands-on labStationX Membership
Identify Access to a LINUX Firewall Through SYSLOG ServiceCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will identify access to a PFSENSE firewall through the forwarding of SYSLOG (System logs) from a Firewall to the SYSLOG service we have configured and set up on the Network.Hands-on labStationX Membership
Identify Rootkit and DLL Injection ActivityRootkits & Threat DetectionDuration: 1 hStudents will use Olly Debugger to debug a suspect program and determine if any of the observed behavior is malicious or not.Hands-on labStationX Membership
Identifying Anomalous ARPRootkits & Threat DetectionDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with identifying anomalous ARP traffic.Hands-on labStationX Membership
Implement Single System Changes in FirewallCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will gain practical experience configuring a pfSense firewall to control and secure network traffic.Hands-on labStationX Infrastructure Labs
Implement TLS and Certificate Controls for a ServiceSecurity Operations PractitionerLevel: GuidedDuration: 1 h"In this lab, you will secure a service using TLS and certificates.Hands-on labStationX Membership
Import Nexpose Vulnerability Data into QRadarCyber Defense Forensics Analyst Training SeriesDuration: 1 h 30 minStudents will use QRadar to schedule and run an automated vulnerability scan using Nexpose to identify potential threat vectors.Hands-on labStationX Infrastructure Labs
Integrated Hardening Sprint A: Segment, Harden, and Secure ServicesSecurity Operations PractitionerLevel: AdvancedDuration: 1 h 30 minIn this lab, you will complete a multi-part hardening sprint to segment, harden, and secure services.Hands-on labStationX Membership
Intro to Linux - Routing and SSH TunnelsCyber Defense Forensics Analyst Training SeriesDuration: 2 hRouting is an important networking concept.Hands-on labStationX Membership
Lab Environment Orientation - *** (Start Here!) ***Cyber Defense Forensics Analyst Training SeriesDuration: 1 hThe purpose of this lab is to allow you to familiarize yourself with the lab virtual environment.Hands-on labStationX Membership
Linux AnalysisMalware Analysis & Reverse Engineering Duration: 1 hIn this lab, students will use Exterro’s Forensic Toolkit (FTK) to perform foundational digital media analysis on a provided disk image.Hands-on labStationX Membership
Live Imaging with FTK Imager LiteCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use FTK Imager Lite to create a forensic image of a Windows 8 workstation.Hands-on labStationX Membership
LNX101 - OpenSSH Installation, Configuration, and HardeningCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will learn how to install, configure, harden and test an OpenSSH server.Hands-on labStationX Membership
LNX101 - Setting Up a Firewall With UFW and FirewalldCyber Defense Forensics Analyst Training SeriesDuration: 1 hSetup a firewall on Linux Duration: 1 hourHands-on labStationX Membership
LNX101 - Telnet vs. SSHCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will learn how to use telnet, an insecure protocol that sends its data over the network in an unencrypted form.Hands-on labStationX Membership
Log AnalysisMalware Analysis & Reverse Engineering Duration: 1 hIn this lab students will have the opportunity to review various log files associated with the Windows operating system.Hands-on labStationX Membership
MAC AnalysisMalware Analysis & Reverse Engineering Duration: 1 hStudents will use this lab to become familiar with locations of data on a MAC Image.Hands-on labStationX Membership
Man In the Middle Crypto AttackRootkits & Threat DetectionDuration: 1 hStudents will be placed in the middle of an encrypted chat session.Hands-on labStationX Membership
Manually Analyze Malicious PDF DocumentsCyber Defense Forensics Analyst Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.Hands-on labStationX Membership
Manually Analyze Malicious PDF Documents 2Cyber Defense Forensics Analyst Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.Hands-on labStationX Membership
Memory Extraction and AnalysisCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis is one of the labs for the Advanced Digital Media Forensics class.Hands-on labStationX Membership
Metadata Extraction LabForensic Investigations and Evidence HandlingDuration: 1 hIn this lab, students will understand what Metadata is and learn a tool to use to identify it.Hands-on labStationX Membership
Nessus Scanning and ReportingCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis exercise will introduce trainees to the advanced settings within the Nessus Vulnerability Scanner.Hands-on labStationX Membership
Nexpose: Blue Team RemediationCyber Defense Forensics Analyst Training SeriesDuration: 3 hThe Nexpose BlueTeam remediation lab will teach students how to run the nexpose remediation report, analyze high risk machines and remediate critical threats.Hands-on labStationX Membership
PAM LabCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis lab exercise is designed to allow trainees to remotely access a virtual machine using SSH to create a user account and assign the user account permissions on the virtual machine.Hands-on labStationX Membership
Parse Files Out of Network TrafficCyber Defense Forensics Analyst Training SeriesDuration: 1 hThis lab teach students how to extract various files from network traffic using Network Miner and Wireshark.Hands-on labStationX Membership
Participate in Attack Analysis Using Trusted Tool SetCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will participate in attack analysis/incident response, including root cause determination, to identify vulnerabilities exploited, vector/source and methods used (e.g., malware, denial of…Hands-on labStationX Membership
Password Cracking with PRTKForensic Investigations and Evidence HandlingDuration: 2 hIn this lab, students will learn how to use Exterro’s Password Recovery Toolkit (PRTK) to recover a variety of password types.Hands-on labStationX Membership
Patching With WSUSCyber Defense Forensics Analyst Training SeriesDuration: 2 hStudents will have access to a Windows 2012 Server running the Windows Server Update Service (WSUS), and use it to select and approve patches needed for a Windows 7 client.Hands-on labStationX Membership
Pentesting & Network Exploitation - Linux Target Analysis LabsCyber Defense Forensics Analyst Training SeriesDuration: 2 hArt of Exploitation: Pentesting & Network Exploitation exposes students to all manner of reconnaissance, scanning, enumeration, exploitation and pillaging for 802.3 networks.Hands-on labStationX Membership
Personal Security ProductsRootkits & Threat DetectionDuration: 1 hAnti-virus (AV) programs are software designed to detect and quarantine programs that are deemed malicious.Hands-on labStationX Membership
Practical Malware Analysis LabsMalware Analysis & Reverse Engineering MAL600 exposes students to the theoretical knowledge and hands-on techniques to reverse engineer malware that was designed to thwart the most common reverse engineering techniques.Hands-on labStationX Infrastructure Labs
Prioritize Risks and Implement One RemediationSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will perform practical risk management by using staged technical findings.Hands-on labStationX Membership
Protect Against BeaconingCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will take a PCAP indicating the presence of a beacon on the network and analyze it.Hands-on labStationX Membership
Recovery From Inadequate PatchingCyber Defense Forensics Analyst Training SeriesDuration: 2 hStudents will become familiar with procedures used backing up data, patching the system after a reported attack, checking the system for new vulnerabilities and then performing a rollback.Hands-on labStationX Infrastructure Labs
Reduce DVWA Exposure by Using Compensating ControlsSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will reduce risk from a vulnerable DMZ web application using compensating controls.Hands-on labStationX Membership
Registry AnalysisCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 2 hIn this lab, students will explore the types of information stored within the Windows Registry and learn how to locate key data across different registry hives.Hands-on labStationX Membership
Remove TrojanMalware Analysis & Reverse Engineering Duration: 1 hIn this lab, the student will execute a defined response plan to identify and remove a Trojan virus from a Windows environment using Windows Security Essentials.Hands-on labStationX Membership
Reverse Engineering MalwareMalware Analysis & Reverse Engineering MAL500 builds upon our Fundamentals of Malware Analysis course and exposes students to the theoretical knowledge and hands-on techniques used to analyze malware of greater complexity.Hands-on labStationX Membership
Rogue Device Identification and BlockingCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will scan a network and identify rogue devices.Hands-on labStationX Membership
RootKitMalware Analysis & Reverse Engineering Duration: 2 hThis lab is designed to introduce the student to a Windows rootkit and to some tools and techniques used in discovery and removal of the rootkit.Hands-on labStationX Membership
Scanning From WindowsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Scalnline, a windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Scanning with NmapCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab, you will perform several scans but, using Wireshark, you will be able to view the scan traffic to see what the tool is actually doing under the hood.Hands-on labStationX Infrastructure Labs
Secure Privileged Access and Auditing in Active DirectorySecurity Operations PractitionerLevel: GuidedDuration: 1 h"In this lab, you will improve identity security in Active Directory.Hands-on labStationX Membership
Securing Linux - FirewallsCyber Defense Forensics Analyst Training SeriesDuration: 1 hFirewalls are an important part of limiting network traffic.Hands-on labStationX Membership
Securing Linux for System AdministratorsCyber Defense Forensics Analyst Training SeriesDuration: 1 hLinux environments are ubiquitous in many different sectors, and securing these environments is as important as securing Windows environments.Hands-on labStationX Membership
Snap ExploitCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn January 2019, a local privilege escalation vulnerability was discovered in Ubuntu's snapd service.Hands-on labStationX Membership
Snort Signatures, IDS Tuning, and BlockingCyber Defense Forensics Analyst Training Series + 1 more blockDuration: 1 hOften the security analyst will need to update the existing IDS/IPS (Intrusion Detection/Prevention System) to handle new threats.Hands-on labStationX Membership
Specialized Linux Port ScansCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will leverage Hping3 to assess ports of various devices on the assigned network.Hands-on labStationX Infrastructure Labs
Threat Modeling to Controls: Identify Risks and Implement MitigationsSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will threat-model a system in the given environment and implement a mitigation.Hands-on labStationX Infrastructure Labs
Triage, Contain, and Automate Incident ResponseSecurity Operations PractitionerLevel: GuidedDuration: 1 hIn this lab, you will investigate and respond to an incident by using real tools and pre-staged artifacts in the environment.Hands-on labStationX Membership
Tweaking Firewall Rules for DetectionCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use organizational firewall for monitoring, detecting and auditing traffic on the network.Hands-on labStationX Membership
Use pfTop to Analyze Network TrafficCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will use pfTop, a network traffic monitoring/statistics plugin used in pfSense, to analyze and monitor network traffic.Hands-on labStationX Membership
VirtualizationForensic Investigations and Evidence HandlingDuration: 1 hThis lab is designed to provide students with the experience of creating a simple virtual machine (VM) using VMware Player.Hands-on labStationX Membership
Whitelist IP Address from IDS AlertsCyber Defense Forensics Analyst Training SeriesDuration: 1 hStudents will whitelist the approved scanning device so that no security alerts are generated from the host.Hands-on labStationX Membership
Whitelisting & Suspicious File VerificationRootkits & Threat DetectionDuration: 2 hStudents will become familiar with procedures used in the validation of suspicious files.Hands-on labStationX Membership
Windows Event Log Manipulation via Windows Event ViewerCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this lab you will use Windows Event Viewer to view and filter the security event log on a Windows 11 client computer specifically for account logons.Hands-on labStationX Membership
WiresharkCyber Defense Forensics Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will gain a foundational understanding of network traffic analysis using Wireshark.Hands-on labStationX Membership
x86 Buffer Overflows - Part 1Rootkits & Threat DetectionDuration: 3 hIn this lab, students will write their own vulnerable program in C, debug the program while performing a buffer overflow, and control execution flow to jump to a function in the code that is not…Hands-on labStationX Membership
x86 Buffer Overflows - Part 2Rootkits & Threat DetectionDuration: 3 hIn this lab, you will fuzz and exploit vulnserver.exe, generate shellcode with msfvenom, and develop a working exploit locally that will then be used to exploit the service running remotely on…← Previous · Page 2 of 2