Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 3
Filter results
Type
Topic
Included in
70 results
Hands-on labStationX Membership
Additional Scanning OptionsCyber Defense Analyst Training SeriesDuration: 1 hStudents will leverage Nmap, a network discovery and mapping tool, to identify the systems on a network of responsibility.
Hands-on labStationX Membership
Advanced Techniques for Malware RecoveryCyber Defense Analyst Training SeriesDuration: 1 hStudents will use the SysInternals Suite of utilities to analyze processes, DLLs, registry edits and other auto start functions to locate and remove malicious software from an infected Windows 7…Hands-on labStationX Membership
Analysis and Recommendation ReportCyber Defense Analyst Training SeriesDuration: 1 hStudents will do a Vulnerability Assessment on a network.
Hands-on labStationX Membership
Analyze and Classify MalwareCyber Defense Analyst Training SeriesDuration: 1 hIn this lab you will attempt to conduct basic analysis on some malware samples that were found on the internal network.Hands-on labStationX Membership
Analyze SQL Injection AttackCyber Defense Analyst Training SeriesDuration: 1 hStudents will Identify the use of an SQL Injection through the use of Wireshark.
Hands-on labStationX Membership
Analyze Various Data Sources to Confirm Suspected InfectionCyber Defense Analyst Training SeriesDuration: 1 hStudents will review network traffic to confirm the presence of malicious activity using various tools including Wireshark and VirusTotal.com.Hands-on labStationX Membership
Applying Filters to TCPDump and WiresharkCyber Defense Analyst Training SeriesDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with applying a capture filter to TCPDump and Wireshark using Berkley Packet Filter (BPF) syntax.Hands-on labStationX Membership
Assessing Vulnerabilities Post AddressalCyber Defense Analyst Training SeriesDuration: 1 hStudents will use Snorby against multiple systems to identify and mitigate any vulnerabilities found.Hands-on labStationX Membership
Block Incoming Traffic on Known PortCyber Defense Analyst Training SeriesDuration: 1 hIn this lab, the student will respond to an incident by blocking incoming traffic on a known port from a specific IP.
Hands-on labStationX Membership
Centralized MonitoringCyber Defense Analyst Training SeriesDuration: 1 hIn this lab, students will learn how to ingest log data into Splunk by first manually uploading log files for analysis.
Hands-on labStationX Membership
CIRP Creation and DisasterCyber Defense Analyst Training SeriesDuration: 2 hStudents will become familiar with the creation of a Cyber Incident Response Plan (CIRP).Hands-on labStationX Membership
Collecting Logs and Verifying Syslog AggregationCyber Defense Analyst Training SeriesDuration: 2 hCollecting and aggregating logs are very essential to any organization.Hands-on labStationX Membership
Comprehensive Threat ResponseCyber Defense Analyst Training SeriesDuration: 2 hIn this final lab, we will attempt to exercise all the relevant skills found in this domain.Hands-on labStationX Membership
Conduct Root Cause Analysis for System CrashesCyber Defense Analyst Training SeriesDuration: 1 hStudents will use utilize a specially loaded system to conduct analysis on a captured memory dump from a machine suffering from repeating system crashes.Hands-on labStationX Membership
Core Impact Web Application Penetration TestingCyber Defense Analyst Training SeriesDuration: 1 hThis lab introduces students to the web application penetration testing suite within the Core Impact application.Hands-on labStationX Membership
Create Custom Snort RulesCyber Defense Analyst Training SeriesDuration: 1 hYou will configure snort as an IDS.Hands-on labStationX Membership
Creating Recommendations Based on Vulnerability AssessmentsCyber Defense Analyst Training SeriesDuration: 1 hStudents will use nmap and OpenVAS / Greenbone Vulnerability Scanner to confirm old vulnerable systems and discover new ones.Hands-on labStationX Membership
Creating SIEM Reports with SplunkCyber Defense Analyst Training SeriesDuration: 1 hStudents will walk through the creation of SIEM reports using the SPLUNK tool.Hands-on labStationX Membership
Disable User Account on Windows 10Cyber Defense Analyst Training SeriesDuration: 1 hIn this lab, the student will respond to a suspected insider threat incident by disabling user accounts in Windows.
Hands-on labStationX Membership
Event Log Collection with QRadarQRadar SIEMDuration: 2 hIn this lab you will use QRadar with wincollect to ingest logs from a local host for analysis Duration 1 hourHands-on labStationX Membership
Firewall Setup and ConfigurationCyber Defense Analyst Training SeriesDuration: 1 hHands-on labStationX Membership
Gap Analysis of Firewall RulesCyber Defense Analyst Training SeriesDuration: 2 hStudents will log into an organization's firewall, document existing firewall rules, analyze these rules and making recommendations based on this analysis.Hands-on labStationX Membership
Identify Whether High-Risk Systems Were AffectedCyber Defense Analyst Training SeriesDuration: 1 hThe highest risk systems are the ones with Internet facing Applications.Hands-on labStationX Membership
Identifying Malicious Network ConnectionsCyber Defense Analyst Training SeriesDuration: 1 hWhen investigating a cybersecurity incident it's important to take memory snapshots of affected systems for further analysis.Hands-on labStationX Membership
Identifying System Vulnerabilities with OpenVASCyber Defense Analyst Training SeriesDuration: 2 hStudents will scan a system in OpenVAS (Open Vulnerability Assessment) to discover and identify systems on the network that have vulnerabilities.Hands-on labStationX Membership
IDS Setup and ConfigurationCyber Defense Analyst Training SeriesDuration: 1 hNetwork and host-based Intrusion Detection Systems (IDS) analyze traffic and provide log and alert data for detected events and activity. pfSense provides multiple IDS options including Host IDS and…Hands-on labStationX Membership
Implement Single System Changes in FirewallCyber Defense Analyst Training SeriesDuration: 1 hIn this lab, you will make changes to the pfSense firewall in order to block specific ports and types of traffic.Hands-on labStationX Membership
Linux Users and GroupsCyber Defense Analyst Training SeriesDuration: 1 hIn this lab students will use command line tools to create, modify, and manage users and groups within the Linux operating environment.Hands-on labStationX Membership
Log AnalysisCyber Defense Analyst Training SeriesDuration: 1 hIn this lab students will have the opportunity to review various log files associated with the Windows operating system.Hands-on labStationX Membership
Log CorrelationCyber Defense Analyst Training SeriesDuration: 1 hStudents will use Splunk to ingest server logs and a physical access log to determine if a physical security event has occurred, and if so, who may be behind it.Hands-on labStationX Membership
Manual Vulnerability AssessmentCyber Defense Analyst Training SeriesDuration: 1 hAs part of the defense in depth model it is vitally important to keep tabs on the events occurring on individual devices/systems.Hands-on labStationX Membership
Manually Creating a Baseline with MD5DeepCyber Defense Analyst Training SeriesDuration: 1 hStudents will create a baseline on a documents folder using md5deep.Hands-on labStationX Membership
Microsoft Baseline Security AnalyzerCyber Defense Analyst Training SeriesDuration: 1 hIn this lab you will use Microsoft Baseline Security Analyzer (MBSA) to perform scans of individual host computers and of groups of computers.Hands-on labStationX Membership
Monitoring and Verifying Management SystemsCyber Defense Analyst Training SeriesDuration: 1 hIn this lab, students will use Nessus Essentials to assess a system for vulnerabilities and generate a detailed analysis report.Hands-on labStationX Membership
Monitoring for False PositivesCyber Defense Analyst Training SeriesDuration: 1 hIn this lab we will map a drive to a share on the network and then copy resources from a file server.Hands-on labStationX Membership
Monitoring Network TrafficCyber Defense Analyst Training SeriesDuration: 1 hIn this hands-on lab, students will learn how to monitor and analyze network activity using a combination of industry-standard security tools.Hands-on labStationX Membership
Network DiscoveryCyber Defense Analyst Training SeriesDuration: 2 hThe Network Discovery lab is designed to help students facilitate open source collection by teaching them how to use more intimate network discovery techniques.Hands-on labStationX Membership
Network Segmentation (FW/DMZ/WAN/LAN)Cyber Defense Analyst Training SeriesDuration: 1 hCreate three distinct areas for this network, route traffic accordingly and lock down VPN access to the appropriate IP address.Hands-on labStationX Membership
Network Topology GenerationCyber Defense Analyst Training SeriesDuration: 2 hIn this hands-on lab, students will gain practical experience using Zenmap, the graphical interface for Nmap, to perform network discovery and reconnaissance.Hands-on labStationX Membership
Open and Close Ports on Windows 7Cyber Defense Analyst Training SeriesDuration: 1 hIn this lab, the student will kill some processes and close down some shares in response to a suspected threat.Hands-on labStationX Membership
Parse Files Out of Network TrafficCyber Defense Analyst Training SeriesDuration: 1 hThis lab teach students how to extract various files from network traffic using Network Miner and Wireshark.Hands-on labStationX Membership
Preliminary ScanningCyber Defense Analyst Training SeriesDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Protect Against BeaconingCyber Defense Analyst Training SeriesDuration: 1 hStudents will take a PCAP indicating the presence of a beacon on the network and analyze it.Hands-on labStationX Membership
QRADAR - Auditing Service Accounts and Generating SIEM ReportsQRadar SIEMDuration: 2 hCollecting and aggregating logs are very essential to any organization.Hands-on labStationX Membership
QRadar - Centralized MonitoringQRadar SIEMDuration: 1 hThis lab will help the students understand common logs in linux and to configure a remote system to forward syslog events to a central location (QRadar).Hands-on labStationX Membership
QRADAR - Collecting Logs and Verifying Syslog Aggregation with pfSenseQRadar SIEMDuration: 2 hCollecting and aggregating logs are very essential to any organization.Hands-on labStationX Membership
QRadar - IDS Setup and ConfigurationQRadar SIEMDuration: 1 hOften the security analyst will need to update the existing IDS/IPS (Intrusion Detection/Prevention System) to handle new threats.Hands-on labStationX Membership
QRadar - Log Correlation & Analysis to Identify Potential IOCQRadar SIEMDuration: 1 hWhen defending networked digital systems, attention must be paid to the logging mechanisms set in place to detect suspicious behavior.Hands-on labStationX Membership
QRadar - Log Correlation & Analysis to Identify Potential IOC with Custom Log TypesQRadar SIEMDuration: 3 hThis lab will teach users how to use QRadar to correlate logs from varying sources, and create custom log types for unknown events.Hands-on labStationX Membership
QRADAR - Setting Up SYSLOG Forwarding From a Windows SystemQRadar SIEMDuration: 2 hCollecting and aggregating logs are very essential to any organization.Hands-on labStationX Membership
QRadar - Snort Signatures, IDS Tuning, and BlockingQRadar SIEMDuration: 1 hOften the security analyst will need to update the existing IDS/IPS (Intrusion Detection/Prevention System) to handle new threats.Hands-on labStationX Membership
Recover from IncidentCyber Defense Analyst Training SeriesDuration: 2 hThis lab covers a variety of concepts, and exercises static and dynamic analysis skills related to malware identification and eradication.
Hands-on labStationX Membership
Recover from SQL Injection AttackCyber Defense Analyst Training SeriesDuration: 1 hAfter identifying a SQL Injection attack, students will learn about parameterized queries in back-end web servers to minimize future SQLi attacks.Hands-on labStationX Membership
Report Writing for Presentation to ManagementCyber Defense Analyst Training SeriesDuration: 1 hIn an earlier lab, students analyzed a suspected exploit (FlashPack Exploit Kit) on a corporate machine.Hands-on labStationX Membership
Searching for Indicators of CompromiseCyber Defense Analyst Training SeriesDuration: 1 hIf a company has a vulnerable Internet facing application, it can be exploited.Hands-on labStationX Membership
Setting Up SYSLOG Forwarding From a Windows SystemCyber Defense Analyst Training SeriesDuration: 1 hStudents will learn how to conduct manual scanning against systems using command line tools such as Netcat then they will login to a discovered system and enable object access verify that auditing…Hands-on labStationX Membership
Threat DesignationCyber Defense Analyst Training SeriesDuration: 1 hStudents will conduct scans against a web server, a file share, a printer and a user's host device.Hands-on labStationX Membership
Using Snort and Wireshark to Analyze TrafficCyber Defense Analyst Training SeriesDuration: 1 hIn this lab we will replicate the need for Analysts to be able to analyze network traffic and detect suspicious activity.Hands-on labStationX Membership
Vulnerability Analysis/ProtectionCyber Defense Analyst Training SeriesDuration: 3 hStudents will use OpenVAS to do a vulnerability analysis.Hands-on labStationX Membership
Vulnerability Scanner Set-up and ConfigurationCyber Defense Analyst Training SeriesDuration: 1 hStudents will setup and configure Core Impact in preparation of a vulnerability scan against an internal network.Hands-on labStationX Membership
Vulnerability Scanner Set-up and Configuration with OpenVASCyber Defense Analyst Training SeriesDuration: 1 hStudents will utilize OpenVAS to identify hosts on a network and assess their vulnerabilities.Hands-on labStationX Membership
Vulnerability Scanning with GVMCyber Defense Analyst Training SeriesDuration: 2 hStudents will conduct a vulnerability scan utilizing Greenbone Vulnerability Management (GVM), generate a vulnerability report, and review the vulnerabilities identified in the report.Hands-on labStationX Membership
Whitelist ComparisonCyber Defense Analyst Training SeriesDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.Hands-on labStationX Membership
Windows System Hardening with Group Policy & Active DirectoryCyber Defense Analyst Training SeriesDuration: 2 hIn this hands-on lab, students will learn how to strengthen and manage a Windows domain environment using Active Directory and Group Policy.Hands-on labStationX Membership
Windows System Hardening with PowerShellCyber Defense Analyst Training SeriesDuration: 2 hIn this hands-on lab, students will use PowerShell to implement essential Windows system hardening techniques.
Hands-on labStationX Membership
Basic Linux x64 Binary Exploitation with pwntoolsLinux x64 Binary ExploitationDuration: 1 hIn this lab, we will look at some basic binary exploitation in 64 bit Linux.Hands-on labStationX Membership
Linux x64 Binary Exploitation with ASLR and PIELinux x64 Binary ExploitationDuration: 3 hThe final two exploit mitigation techniques that we will discuss deal with the randomization of the executable.Hands-on labStationX Membership
Linux x64 Binary Exploitation with NX and ROPLinux x64 Binary ExploitationDuration: 4 hIn this lab, we will look at how to exploit a binary when NX is turned on.Hands-on labStationX Membership
Linux x64 Binary Exploitation with Stack Canaries (Part 1)Linux x64 Binary ExploitationDuration: 2 hIn this lab, we will look at how stack canaries are used to prevent stack based buffer overflows and potential ways that they can be defeated.Hands-on labStationX Membership
Linux x64 Binary Exploitation with Stack Canaries (Part 2)Linux x64 Binary ExploitationDuration: 2 hIn this lab, we will continue our look at how stack canaries are used to prevent stack based buffer overflows and potential ways that they can be defeated.