Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 3
Filter results
Type
Topic
Included in
79 results
Hands-on labStationX Membership
Applying Filters to TCPDump and WiresharkIntro to Network Security & Traffic Analysis + 1 more blockDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with applying a capture filter to TCPDump and Wireshark using Berkley Packet Filter (BPF) syntax.
Hands-on labStationX Membership
DNS as a Remote ShellIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with recognizing remote shells that operate using well known ports such as DNS.Hands-on labStationX Membership
Firewall Setup and ConfigurationIntro to Network Security & Traffic Analysis + 2 more blocksDuration: 1 hIn this lab you will perform the steps necessary to set up a pfSense firewall from the basic command line interface and then configure the firewall using the web configuration GUI on a Windows…Hands-on labStationX Membership
Gap Analysis of Firewall RulesIntro to Network Security & Traffic AnalysisDuration: 2 hStudents will log into an organization's firewall, document existing firewall rules, analyze these rules and making recommendations based on this analysis.Hands-on labStationX Membership
Implementing Least-Privilege on WindowsIntro to Network Security & Traffic AnalysisDuration: 1 hLeast-privilege is an important concept across many domains (e.g., Windows server/workstation management, networking, Linux management, etc.) and requires great discipline to implement properly.Hands-on labStationX Membership
Network Segmentation (FW/DMZ/WAN/LAN)Intro to Network Security & Traffic Analysis + 2 more blocksDuration: 1 hCreate three distinct areas for this network, route traffic accordingly and lock down VPN access to the appropriate IP address.Hands-on labStationX Membership
Setting Up Zones in a FirewallIntro to Network Security & Traffic Analysis + 1 more blockDuration: 1 hStudents will configure a pfSense Firewall to create/isolate various network segments.Hands-on labStationX Membership
Snorby Setup and OperationIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to expose trainees to perform an initial setup for Security Onion and to configure and install Snort and Snorby.Hands-on labStationX Membership
TCPDumpIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee become familiar with the basic command arguments and usage of TCPDump.Hands-on labStationX Membership
Tweaking Firewall Rules for DetectionIntro to Network Security & Traffic Analysis + 1 more blockDuration: 1 hStudents will use organizational firewall for monitoring, detecting and auditing traffic on the network.Hands-on labStationX Membership
Using Snort and Wireshark to Analyze TrafficIntro to Network Security & Traffic Analysis + 1 more blockDuration: 1 hIn this lab we will replicate the need for Analysts to be able to analyze network traffic and detect suspicious activity.Hands-on labStationX Membership
WiresharkIntro to Network Security & Traffic AnalysisDuration: 1 hIn this hands-on lab, students will gain a foundational understanding of network traffic analysis using Wireshark.
Hands-on labStationX Membership
Analyze Browser-based Heap Spray AttackNetwork ForensicsDuration: 1 hStudents will identify a browser-based attack used against a corporate asset using a network protocol analyzer.
Hands-on labStationX Membership
Analyze Malicious Network TrafficNetwork Operations Specialist Training SeriesDuration: 2 hStudents will take some time to review malicious traffic within a controlled environment.
Hands-on labStationX Membership
Assess A High-Risk SystemNetwork SecurityDuration: 1 hSystems that are required to provide remote or public customer access should be placed in a Demilitarized Zone (DMZ).Hands-on labStationX Membership
Auditing Service AccountsNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hStudents will audit service accounts in a Windows Server environment.Hands-on labStationX Membership
Auditing Service Accounts and Creation of Service Accounts To Run Specific ServicesNetwork Operations Specialist Training SeriesDuration: 1 hStudents will explore the auditing of service accounts in a Windows Environment.Hands-on labStationX Membership
Auditing Service Accounts and Setting Up Automated Log CollectionNetwork Operations Specialist Training SeriesDuration: 2 hStudents will explore information-gathering techniques, audit service accounts in a Windows Environment, collect Windows logs, and automate log transfer with Syslog.
Hands-on labStationX Membership
Automated in-Depth Packet DecodingNetwork ForensicsDuration: 2 hStudents will use Network Miner to analyze network traffic.Hands-on labStationX Membership
Baseline Systems in Accordance with Policy DocumentationNetwork Operations Specialist Training SeriesDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.Hands-on labStationX Membership
Block Incoming Traffic on Known PortNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hIn this lab, the student will respond to an incident by blocking incoming traffic on a known port from a specific IP.
Hands-on labStationX Membership
Clonezilla_NetworkNetwork Forensics + 1 more blockDuration: 1 hAs a incident responder, it's important to understand how to create baseline templates.Hands-on labStationX Membership
Comparing ControlsNetwork Operations Specialist Training SeriesDuration: 1 hStudents will evaluate policies in place on a domain and apply those policies in accordance to organizational standards.Hands-on labStationX Membership
Conduct Root Cause Analysis for System CrashesNetwork Operations Specialist Training SeriesDuration: 1 hStudents will use utilize a specially loaded system to conduct analysis on a captured memory dump from a machine suffering from repeating system crashes.
Hands-on labStationX Membership
Conduct Supplemental MonitoringNetwork Operations Specialist Training SeriesDuration: 1 hIn this lab you implement supplemental monitoring solutions on a network using various Microsoft security tools and built-ins.Hands-on labStationX Membership
Control Assessment and EvaluationNetwork Operations Specialist Training SeriesDuration: 1 hStudents start off the lab by reviewing are a list of security controls which are to be applied to systems on a fictitious corporate network.Hands-on labStationX Membership
Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerNetwork Operations Specialist Training SeriesDuration: 1 hStudents will create a list of installed programs, services, and accounts in a Windows 2012 server environment using various tools and methods.
Hands-on labStationX Membership
Data Backup to Prep for RecoverySystem Administration Training SeriesDuration: 1 hIn this lab we will simulate the recovery phase where we must perform a backup in a server environment.Hands-on labStationX Membership
Denial of Service PCAP AnalysisNetwork Operations Specialist Training SeriesDuration: 1 hThe student will act as attacker and defender in this scenario.Hands-on labStationX Membership
Holistic Network Identification and ProtectionNetwork SecurityDuration: 2 hThis exercise provides students an opportunity to exercise their network identification and protection capabilities learned in the last week.Hands-on labStationX Membership
Host Identification Scanning via WindowsNetwork Operations Specialist Training SeriesDuration: 1 hStudents will leverage Scanline, a Windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Host Identification Scanning with LinuxNetwork Operations Specialist Training SeriesDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool to identify the systems on a network of responsibility.Hands-on labStationX Membership
Identify Access to a LINUX Firewall Through SYSLOG ServiceNetwork Operations Specialist Training SeriesDuration: 1 hStudents will identify access to a PFSENSE firewall through the forwarding of SYSLOG (System logs) from a Firewall to the SYSLOG service we have configured and set up on the Network.Hands-on labStationX Membership
Identifying Intrusion and Mitigating Attacks with RHEL ServerNetwork ForensicsDuration: 1 hThis last lab is similar to the Windows Incident Response lab, but different in that this one requires you to run through the IR process in a Linux, more specifically a Red-Hat, environment.Hands-on labStationX Membership
Identifying Malicious CallbacksNetwork ForensicsDuration: 1 hStudents will try to identify suspicious behavior on a compromised machine using volatility.Hands-on labStationX Membership
Identifying Malicious Network ConnectionsNetwork ForensicsDuration: 1 hWhen investigating a cybersecurity incident it's important to take memory snapshots of affected systems for further analysis.Hands-on labStationX Membership
Implement Single System Changes in FirewallNetwork SecurityDuration: 1 hIn this lab, you will make changes to the pfSense firewall in order to block specific ports and types of traffic.Hands-on labStationX Membership
Incident Detection and IdentificationNetwork ForensicsDuration: 3 hStudents will demonstrate their capabilities to identify network components and detect a potential incident. **NOTE** This is a scenario-based lab.Hands-on labStationX Membership
Intro To Linux - Command Line BasicsSystem Administration Training SeriesDuration: 1 hLinux command line tools Duration: 1 hour
Hands-on labStationX Membership
Intro to Linux - Routing and SSH TunnelsNetwork Operations Specialist Training SeriesDuration: 2 hRouting is an important networking concept.Hands-on labStationX Membership
Linux Users and GroupsSystem Administration Training SeriesDuration: 1 hIn this lab students will use command line tools to create, modify, and manage users and groups within the Linux operating environment.Hands-on labStationX Membership
LNX101 - Fail2Ban Setup and AnalysisSystem Administration Training SeriesDuration: 1 hIn this lab, you will learn how to install, configure and test Fail2ban in virtualized environment.Hands-on labStationX Membership
LNX101 - File System StructureSystem Administration Training SeriesDuration: 1 hIn this lab, you will learn the basic file system layout and structure in a typical Linux distribution.Hands-on labStationX Membership
LNX101 - OpenSSH Installation, Configuration, and HardeningNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hIn this lab, you will learn how to install, configure, harden and test an OpenSSH server.Hands-on labStationX Membership
LNX101 - Setting Up a Firewall With UFW and FirewalldNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hFirewall in Linux Duration: 1 hourHands-on labStationX Membership
LNX101 - Telnet vs. SSHNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hTelnet protocol Duration: 1 hourHands-on labStationX Membership
Log AnalysisSystem Administration Training SeriesDuration: 1 hIn this lab students will have the opportunity to review various log files associated with the Windows operating system.Hands-on labStationX Membership
Manual Vulnerability AssessmentNetwork Operations Specialist Training SeriesDuration: 1 hAs part of the defense in depth model it is vitally important to keep tabs on the events occurring on individual devices/systems.Hands-on labStationX Membership
Manually Analyze Malicious PDF DocumentsNetwork Operations Specialist Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.Hands-on labStationX Membership
Manually Analyze Malicious PDF Documents 2Network Operations Specialist Training SeriesDuration: 1 hSeveral company employees have received unsolicited emails with suspicious pdf attachments.Hands-on labStationX Membership
Microsoft Baseline Security AnalyzerSystem Administration Training SeriesDuration: 1 hIn this lab you will use Microsoft Baseline Security Analyzer (MBSA) to perform scans of individual host computers and of groups of computers.Hands-on labStationX Membership
Monitoring and Verifying Management SystemsNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hIn this lab, students will use Nessus Essentials to assess a system for vulnerabilities and generate a detailed analysis report.Hands-on labStationX Membership
Network Topology GenerationNetwork Operations Specialist Training Series + 1 more blockDuration: 2 hIn this hands-on lab, students will gain practical experience using Zenmap, the graphical interface for Nmap, to perform network discovery and reconnaissance.Hands-on labStationX Membership
Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)Network ForensicsDuration: 1 hIn this lab students will use Rapid 7's Nexpose vulnerability scanner to identify, assess, and report on network based threats.Hands-on labStationX Membership
PAM LabNetwork Operations Specialist Training SeriesDuration: 1 hThis lab exercise is designed to allow trainees to remotely access a virtual machine using SSH to create a user account and assign the user account permissions on the virtual machine.Hands-on labStationX Membership
Parse Files Out of Network TrafficNetwork Forensics + 1 more blockDuration: 1 hThis lab teach students how to extract various files from network traffic using Network Miner and Wireshark.Hands-on labStationX Membership
Participate in Attack Analysis Using Trusted Tool SetNetwork Operations Specialist Training SeriesDuration: 1 hStudents will participate in attack analysis/incident response, including root cause determination, to identify vulnerabilities exploited, vector/source and methods used (e.g., malware, denial of…Hands-on labStationX Membership
Patching With WSUSNetwork Operations Specialist Training SeriesDuration: 2 hStudents will have access to a Windows 2012 Server running the Windows Server Update Service (WSUS), and use it to select and approve patches needed for a Windows 7 client.Hands-on labStationX Membership
Preliminary ScanningNetwork Operations Specialist Training SeriesDuration: 1 hStudents will utilize Nmap, a network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Protect Against BeaconingNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hStudents will take a PCAP indicating the presence of a beacon on the network and analyze it.Hands-on labStationX Membership
Recover from IncidentNetwork Operations Specialist Training SeriesDuration: 2 hThis lab covers a variety of concepts, and exercises static and dynamic analysis skills related to malware identification and eradication.
Hands-on labStationX Membership
Rogue Device Identification and BlockingNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hStudents will scan a network and identify rogue devices.Hands-on labStationX Membership
Scanning From WindowsNetwork Operations Specialist Training SeriesDuration: 1 hStudents will leverage Scalnline, a windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Scanning with NmapNetwork Operations Specialist Training SeriesDuration: 1 hIn this lab, you will perform several scans but, using Wireshark, you will be able to view the scan traffic to see what the tool is actually doing under the hood.Hands-on labStationX Membership
Searching for Indicators of CompromiseNetwork ForensicsDuration: 1 hIf a company has a vulnerable Internet facing application, it can be exploited.Hands-on labStationX Membership
Securing Linux - FirewallsNetwork Operations Specialist Training SeriesDuration: 1 hFirewalls are an important part of limiting network traffic.Hands-on labStationX Membership
Securing Linux for System AdministratorsNetwork Operations Specialist Training SeriesDuration: 1 hLinux environments are ubiquitous in many different sectors, and securing these environments is as important as securing Windows environments.Hands-on labStationX Membership
Setting up Filters and Queries in KibanaNetwork ForensicsDuration: 1 hStudents will focus on using filters and queries in Kibana to find indicators of compromise within the network.Hands-on labStationX Membership
Setting Up SYSLOG Forwarding From a Windows SystemNetwork Operations Specialist Training Series + 1 more blockDuration: 1 hStudents will learn how to conduct manual scanning against systems using command line tools such as Netcat then they will login to a discovered system and enable object access verify that auditing…Hands-on labStationX Membership
Sinkholing C2 TrafficNetwork SecurityDuration: 1 hYou have a known C2 Domain that has infected your network.Hands-on labStationX Membership
Snort Signatures, IDS Tuning, and BlockingNetwork Operations Specialist Training SeriesDuration: 1 hOften the security analyst will need to update the existing IDS/IPS (Intrusion Detection/Prevention System) to handle new threats.Hands-on labStationX Membership
Threat DesignationNetwork SecurityDuration: 1 hStudents will conduct scans against a web server, a file share, a printer and a user's host device.Hands-on labStationX Membership
Use pfTop to Analyze Network TrafficNetwork Forensics + 1 more blockDuration: 1 hStudents will use pfTop, a network traffic monitoring/statistics plugin used in pfSense, to analyze and monitor network traffic.Hands-on labStationX Membership
Verify Attributes of Identified SilentBanker IntrusionNetwork ForensicsDuration: 1 hStudents will verify attributes of the identified intrusion with existing internal and external intrusion, pattern and malware databases.Hands-on labStationX Membership
Verify Attributes of Intrusion Through Additional AnalysisNetwork ForensicsDuration: 1 hStudents will validate potential intrusions identified by monitoring systems and perform additional analysis.Hands-on labStationX Membership
Vulnerability Analysis/ProtectionNetwork Operations Specialist Training SeriesDuration: 3 hStudents will use OpenVAS to do a vulnerability analysis.Hands-on labStationX Membership
Windows Event Log Manipulation via Windows Event ViewerNetwork Forensics + 1 more blockDuration: 1 hIn this lab you will use Windows Event Viewer to view and filter the security event log on a Windows 7 client computer specifically for account logons.Hands-on labStationX Membership
Windows System Hardening with Group Policy & Active DirectorySystem Administration Training SeriesDuration: 2 hIn this hands-on lab, students will learn how to strengthen and manage a Windows domain environment using Active Directory and Group Policy.Hands-on labStationX Membership
Windows System Hardening with PowerShellNetwork Operations Specialist Training Series + 2 more blocksDuration: 2 hIn this hands-on lab, students will use PowerShell to implement essential Windows system hardening techniques.