Browse everything

Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue

Filters 1

Filter results

Duration: 30–60 minClear all

739 results — showing 1–100

Hands-on labStationX Membership

Additional Scanning OptionsCyber Defense Analyst Training Series + 2 more blocksDuration: 1 hStudents will leverage Nmap, a network discovery and mapping tool, to identify the systems on a network of responsibility.

Hands-on labStationX Membership

Applying Filters to TCPDump and WiresharkCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with applying a capture filter to TCPDump and Wireshark using Berkley Packet Filter (BPF) syntax.

Hands-on labStationX Membership

Baseline Systems in Accordance with Policy DocumentationCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.

Hands-on labStationX Membership

BitLocker SetupCritical Security Controls + 1 more blockDuration: 1 hThis lab shows the student how to setup BitLocker on a Windows 8.1 Professional system.

Hands-on labStationX Membership

Block Incoming Traffic on Known PortCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hIn this lab, the student will respond to an incident by blocking incoming traffic on a known port from a specific IP.

Hands-on labStationX Infrastructure Labs

Can You Add Server Access for a Group?Security+ Tools and Access ManagementLevel: AdvancedDuration: 45 minIn this challenge, you will configure shared access to a server.

Hands-on labStationX Infrastructure Labs

Can You Configure Drive Encryption by Using LUKS and BitLocker?Security+ Defensive ToolsLevel: AdvancedDuration: 45 minIn this challenge, you will implement LUKS drive encryption on a Linux system and BitLocker drive encryption on a Windows system.

Hands-on labStationX Infrastructure Labs

Can You Configure Remote Administration by Using PuTTY and SSH?Security+ Defensive ToolsLevel: ExpertDuration: 1 hIn this challenge, you will use PuTTY and SSH on Windows and Linux to provide secure remote administration.

Hands-on labStationX Infrastructure Labs

Can You Configure Update Management in Linux and Windows?Security+ Secure Systems ManagementLevel: AdvancedDuration: 45 minIn this challenge, you will manage updates on servers that run Linux and Windows.

Hands-on labStationX Infrastructure Labs

Can You Harden a Linux Web Server?Security+ Tools and Access ManagementLevel: ExpertDuration: 1 hIn this challenge, you will secure SSH access to a server.

Hands-on labStationX Infrastructure Labs

Can You Harden the SSH Service on a Linux Server?Security+ Tools and Access ManagementLevel: AdvancedDuration: 45 minIn this challenge, you will improve the security posture of your organization.

Hands-on labStationX Infrastructure Labs

Can You Secure a Website with an SSL/TLS Certificate?Security+ PKI EssentialsLevel: AdvancedDuration: 45 minIn this challenge, you will enable HTTPS for a website and require trusted client PKI certificates.

Hands-on labStationX Infrastructure Labs

Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?Security+ PKI EssentialsLevel: AdvancedDuration: 45 minIn this challenge, you will enable DNSSEC on clients and server and protect data at rest using Microsoft Encrypting File System.

Hands-on labStationX Infrastructure Labs

Can You Use the Sysinternals Suite to Review Permissions on a Windows System?Security+ Defensive ToolsLevel: AdvancedDuration: 45 minIn this challenge, you will use the Sysinternals AccessChk and AccessEnum tools to verify permissions, as well as the Icacles tool to set and verify permissions.

Hands-on labStationX Membership

Centralized MonitoringCritical Security Controls + 2 more blocksDuration: 1 hIn this lab, students will learn how to ingest log data into Splunk by first manually uploading log files for analysis.

Hands-on labStationX Membership

Comparing ControlsCritical Security Controls + 3 more blocksDuration: 1 hStudents will evaluate policies in place on a domain and apply those policies in accordance to organizational standards.

Hands-on labStationX Membership

Conduct Baseline Comparison for Indicators of CompromiseCyber Security Professional + 1 more blockDuration: 1 hLearners will create a system baseline operating snapshot using the Window Forensic Toolchest (WFT) and compare it against a previously created baseline using the KDiff3 application to identify any…

Hands-on labStationX Membership

Creating a Baseline Using AutopsyCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents will run Autopsy against an existing system to create a baseline that will be used for future analysis.

Hands-on labStationX Membership

Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerCyber Defense Forensics Analyst Training Series + 5 more blocksDuration: 1 hStudents will create a list of installed programs, services, and accounts in a Windows 2012 server environment using various tools and methods.

Hands-on labStationX Membership

Creating a Secondary Baseline and Conducting ComparisonCyber Security Professional + 1 more blockDuration: 1 hStudents will create a second baseline using Autopsy and compare it against a previously created baseline using KDiff3.

Hands-on labStationX Membership

Creation of Standard Operating Procedures for RecoveryCritical Security Controls + 1 more blockDuration: 1 hStudents will have access to the results of a vulnerability scan run again a sample Windows 2008 Server.

Hands-on labStationX Membership

Cryptography: Breaking Weak RSA KeysCryptography Attack and DefenceDuration: 1 hStudents will be shown various tools for attacking and using RSA public key information.

Hands-on labStationX Membership

Cryptography: Password CrackingCryptography Attack and DefenceDuration: 1 hTraining on how to use GPG with a GPG challenge at the end.

Hands-on labStationX Membership

Cryptography: Using GPG for Encryption and Key ManagementCryptography Attack and Defence + 2 more blocksDuration: 1 hTraining on how to use GPG with a GPG challenge at the end.

Hands-on labStationX Membership

Data Backup to Prep for RecoveryCritical Security Controls + 6 more blocksDuration: 1 hIn this lab we will simulate the recovery phase where we must perform a backup in a server environment.

Hands-on labStationX Membership

Data Downloads and ValidationCritical Security ControlsDuration: 1 hIn this lab, students will learn to validate downloads to mitigate risk.

Hands-on labStationX Membership

DNS as a Remote ShellIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with recognizing remote shells that operate using well known ports such as DNS.

Hands-on labStationX Membership

Event LogCyber Security FundamentalsDuration: 1 hIn this lab, the trainee will have the opportunity to review event log files associated with the Windows 7 operating system.

Hands-on labStationX Membership

Firewall Setup and ConfigurationCyber Defense Analyst Training Series + 7 more blocksDuration: 1 hIn this lab you will perform the steps necessary to set up a pfSense firewall from the basic command line interface and then configure the firewall using the web configuration GUI on a Windows…

Hands-on labStationX Membership

Force Point: DLP Email OverviewCritical Security ControlsDuration: 1 hForcepoint DLP will teach the student how to configure Forcepoint DLP to stop data loss on the email channel.

Hands-on labStationX Membership

Force Point: DLP Network OverviewCritical Security ControlsDuration: 1 hDLP network: Monitors and enforces DLP policies across several communication channels, including email, web, IM, network printing.

Hands-on labStationX Membership

Host Data Integrity BaseliningCyber Security Fundamentals + 1 more blockDuration: 1 hIn this lab, trainees will explore the fundamentals of establishing file and directory baselines using both Kali Linux and Windows 11.

Hands-on labStationX Membership

Identifying Key AssetsCritical Security ControlsDuration: 1 hStudents will use nmap to identify specific assets on their network.

Hands-on labStationX Membership

Implementing Least-Privilege on WindowsCyber Security Professional + 2 more blocksDuration: 1 hLeast-privilege is an important concept across many domains (e.g., Windows server/workstation management, networking, Linux management, etc.) and requires great discipline to implement properly.

Hands-on labStationX Membership

Leveraging Internal Intelligence ResourcesCritical Security ControlsDuration: 1 hStudents will leverage Zenmap and Tenable Nessus vulnerability scanner in order to perform an internal scan of networked resources.

Hands-on labStationX Membership

Log Correlation & Analysis to Identify Potential IOCCritical Security Controls + 1 more blockDuration: 1 hWhen defending networked digital systems, attention must be paid to the logging mechanisms set in place to detect suspicious behavior.

Hands-on labStationX Infrastructure Labs

Manage System Restore Using Windows 11CompTIA Security+ Core SkillsLevel: GuidedDuration: 45 minIn this lab, you will configure system restore points by using Windows 11.

Hands-on labStationX Membership

Manually Creating a Baseline with MD5DeepCyber Defense Analyst Training Series + 3 more blocksDuration: 1 hStudents will create a baseline on a documents folder using md5deep.

Hands-on labStationX Membership

MITRE - AttackCyber Security Fundamentals + 1 more blockDuration: 1 hThis lab demonstrates the process that Advanced Persistent Threat (APT) actors use to gain initial access to organizations using phishing campaigns and malicious documents.

Hands-on labStationX Membership

MITRE - DefendCyber Security Fundamentals + 1 more blockDuration: 1 hThis lab is designed to teach defenders how to use Mitre ATT&CK and Mitre Navigator to research potential APTs that will target their organization and how to prioritize their defensive efforts.

Hands-on labStationX Membership

Monitoring and Verifying Management SystemsCritical Security Controls + 6 more blocksDuration: 1 hIn this lab, students will use Nessus Essentials to assess a system for vulnerabilities and generate a detailed analysis report.

Hands-on labStationX Membership

Network Segmentation (FW/DMZ/WAN/LAN)Cyber Defense Analyst Training Series + 8 more blocksDuration: 1 hCreate three distinct areas for this network, route traffic accordingly and lock down VPN access to the appropriate IP address.

Hands-on labStationX Membership

Open and Close Ports on Windows 7Critical Security Controls + 1 more blockDuration: 1 hIn this lab, the student will kill some processes and close down some shares in response to a suspected threat.

Hands-on labStationX Membership

Open Source Password CrackingCyber Security Fundamentals + 3 more blocksDuration: 1 hStudents will use John the Ripper and Cain and Abel to crack various password protected file types on a Windows machine.

Hands-on labStationX Membership

Phishing (2026)Critical Security ControlsDuration: 1 hIn this hands-on lab, students will explore the fundamentals of phishing attacks and user awareness by using the Social-Engineer Toolkit (SET) to create a phishing email and simulate a real-world…

Hands-on labStationX Membership

PhishingCritical Security Controls + 1 more blockDuration: 1 hStudents will send a phishing email using the Social Engineering Toolkit.

Hands-on labStationX Membership

Post Incident Service RestorationCritical Security Controls + 1 more blockDuration: 1 hIn this lab, students will focus on the recovery phase of incident response by restoring critical services on a compromised host in a post-incident environment.

Hands-on labStationX Membership

RansomwareCritical Security ControlsDuration: 1 hStudents will learn what ransomware is, observe how it works, and implement mitigation strategies to recover from a ransomware attack.

Hands-on labStationX Membership

Recover from SQL Injection AttackCritical Security Controls + 1 more blockDuration: 1 hAfter identifying a SQL Injection attack, students will learn about parameterized queries in back-end web servers to minimize future SQLi attacks.

Hands-on labStationX Membership

Recovering Data and Data Integrity ChecksSecurity BaselineDuration: 1 hIn this lab, the student will establish a baseline of two pre-defined files, delete those files, and subsequently restore them.

Hands-on labStationX Membership

Scanning From WindowsCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hStudents will leverage Scalnline, a windows network discovery and mapping tool, to identify the systems on a network of responsibility.

Hands-on labStationX Membership

Sensitive Information IdentificationCritical Security ControlsDuration: 1 hStudents will utilize Data Loss Prevention (DLP) software to identify documents potentially containing sensitive information.

Hands-on labStationX Membership

Setting Up Zones in a FirewallCyber Defense Incident Responder + 3 more blocksDuration: 1 hStudents will configure a pfSense Firewall to create/isolate various network segments.

Hands-on labStationX Membership

Snorby Setup and OperationIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to expose trainees to perform an initial setup for Security Onion and to configure and install Snort and Snorby.

Hands-on labStationX Membership

TCPDumpIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee become familiar with the basic command arguments and usage of TCPDump.

Hands-on labStationX Membership

Tweaking Firewall Rules for DetectionCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hStudents will use organizational firewall for monitoring, detecting and auditing traffic on the network.

Hands-on labStationX Membership

Using Snort and Wireshark to Analyze TrafficCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hIn this lab we will replicate the need for Analysts to be able to analyze network traffic and detect suspicious activity.

Hands-on labStationX Membership

Vulnerability Identification and RemediationCritical Security Controls + 1 more blockDuration: 1 hLearners will use Nmap and OpenVAS/Greenbone Vulnerability Scanner to confirm old vulnerable systems and to also discover new ones.

Hands-on labStationX Membership

Windows Deployment ServicesSecurity BaselineDuration: 1 hAs an incident responder, it's important to understand how to create baseline Windows templates.

Hands-on labStationX Membership

Windows Event Log Manipulation via Windows Event ViewerCyber Defense Incident Responder + 4 more blocksDuration: 1 hIn this lab you will use Windows Event Viewer to view and filter the security event log on a Windows 7 client computer specifically for account logons.

Hands-on labStationX Membership

WiresharkCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hIn this hands-on lab, students will gain a foundational understanding of network traffic analysis using Wireshark.

Hands-on labStationX Infrastructure Labs

Can You Configure ACL Permissions in Linux?Linux NetworkingLevel: AdvancedDuration: 45 minIn this challenge, you will use Access Control Lists to assign different levels of access to resources for different users and groups.

Hands-on labStationX Infrastructure Labs

Can You Configure Linux IPv4 Routing?Linux NetworkingLevel: AdvancedDuration: 45 minIn this challenge you will configure IP routing on a multi-homed Linux machine.

Hands-on labStationX Infrastructure Labs

Can You Configure Linux Rsyslog Forwarding?Linux NetworkingLevel: AdvancedDuration: 45 minIn this challenge, you will configure rsyslog forwarding between two Linux hosts.

Hands-on labStationX Infrastructure Labs

Can You Configure Security for SSH in Linux?Linux NetworkingLevel: ExpertDuration: 1 hIn this challenge, you will harden the SSH service with recommended settings, key-based authentication, an alternate port number, and the examination of log files.

Hands-on labStationX Infrastructure Labs

Can You Deploy an Apache Web Server in Linux?Linux NetworkingLevel: ExpertDuration: 1 hIn this challenge, you will install and configure Apache web server, and configure Apache for cgi scripting and file downloads.

Hands-on labStationX Infrastructure Labs

Can You Document the Server in Linux?Linux NetworkingLevel: AdvancedDuration: 45 minIn this challenge, you will use built in Linux utilities to document the server's processor, memory, storage, networking, software and OS configurations.

Hands-on labStationX Infrastructure Labs

Can You Install and Configure a Linux DNS Server [Advanced]?Linux NetworkingLevel: AdvancedDuration: 1 hIn this challenge, you will configure a Linux DNS server that supports name resolution for internal hosts as well as for Internet FQDNs.

Hands-on labStationX Infrastructure Labs

Can You Perform a Network Vulnerability Assessment by Using Nmap?Linux Networking + 1 more blockLevel: AdvancedDuration: 45 minYou are the Linux administrator for your organization.

Hands-on labStationX Infrastructure Labs

Can You Troubleshoot Linux Network Issues?Linux NetworkingLevel: ExpertDuration: 1 hIn this challenge you will configure Linux DNS client settings for name resolution using tools and files such as host, nslookup, dig, getent, /etc/hosts, /etc/resolv.conf and /etc/nssswitch.conf.

Hands-on labStationX Infrastructure Labs

Use Linux and Windows Network Command-Line ToolsNetwork Administration FundamentalsLevel: GuidedDuration: 45 minIn this lab, you will learn how to use various command-line tools for configuring, testing, and troubleshooting network connectivity on Linux and Windows.

Hands-on labStationX Infrastructure Labs

Use Windows and Linux Network Command-Line ToolsNetworking FundamentalsLevel: GuidedDuration: 45 minIn this lab, you will use various command-line tools for configuring, testing, and troubleshooting network connectivity on Windows and Linux.

Hands-on labStationX Infrastructure Labs

Windows Network Command-Line Tools to Configure, Test, and Troubleshoot Network ConnectivityNetworking FundamentalsLevel: GuidedDuration: 45 minIn this lab, you will learn how to use various command-line tools for configuring, testing, and troubleshooting network connectivity on Linux and Windows.

Hands-on labStationX Infrastructure Labs

Can You Configure Remote Connectivity?Manage WindowsLevel: AdvancedDuration: 45 minIn this challenge, you will configure remote assistance tools, including Remote Assistance and Microsoft Remote Desktop, and then manage Windows remotely using Server Manager.

Hands-on labStationX Infrastructure Labs

Can You Configure System and Data Recovery?Manage WindowsLevel: AdvancedDuration: 45 minIn this lab, you will configure system and data recovery.

Hands-on labStationX Infrastructure Labs

Can You Configure Windows 10 Networking?Manage WindowsLevel: AdvancedDuration: 45 minIn this lab, you will configure and troubleshoot networking.

Hands-on labStationX Infrastructure Labs

Can You Install Windows 10?Deploy Windows 10Level: AdvancedDuration: 45 minIn this challenge, you will perform an in-place upgrade from Windows 8 to Windows 10.

Hands-on labStationX Infrastructure Labs

Can You Maintain Windows 10?Manage WindowsLevel: ExpertDuration: 1 hIn this lab, you will manage and maintain Windows.

Hands-on labStationX Infrastructure Labs

Can You Manage Windows Updates?Manage WindowsLevel: AdvancedDuration: 45 minIn this lab, you will manage Windows updates.

Hands-on labStationX Infrastructure Labs

Can You Monitor and Manage Windows?Manage WindowsLevel: AdvancedDuration: 45 minIn this lab, you will configure and analyze Event Logs, view performance data on your computer, prepare management tools, configure the local registry, and schedule tasks.

Hands-on labStationX Infrastructure Labs

Can You Perform Post-Installation Configuration?Deploy Windows 10Level: AdvancedDuration: 45 minIn this lab, you will perform post-installation configuration tasks.

Hands-on labStationX Membership

Disable User Account on Windows 10Cyber Defense Analyst Training Series + 1 more blockDuration: 1 hIn this lab, the student will respond to a suspected insider threat incident by disabling user accounts in Windows.

Hands-on labStationX Infrastructure Labs

Perform an In-Place Upgrade to Windows 10Deploy Windows 10Level: GuidedDuration: 45 minIn this challenge, you will perform an in-place upgrade from Windows 8 to Windows 10.

Hands-on labStationX Infrastructure Labs

Use Linux Tools and CommandsOperating Systems FundamentalsLevel: GuidedDuration: 1 hIn this lab, you will perform tasks using Linux commands.

Hands-on labStationX Membership

Using PowerShell to Analyze a SystemWindows Administration Fundamentals Duration: 1 hIn this lab, students will use PowerShell within a Windows Server 2025 environment to perform system enumeration and data analysis.

Hands-on labStationX Membership

Advanced Techniques for Malware RecoveryCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will use the SysInternals Suite of utilities to analyze processes, DLLs, registry edits and other auto start functions to locate and remove malicious software from an infected Windows 7…

Hands-on labStationX Membership

Analysis and Recommendation ReportCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will do a Vulnerability Assessment on a network.

Hands-on labStationX Membership

Analyze and Classify MalwareCyber Defense Analyst Training Series + 1 more blockDuration: 1 hIn this lab you will attempt to conduct basic analysis on some malware samples that were found on the internal network.

Hands-on labStationX Membership

Analyze SQL Injection AttackCyber Defense Analyst Training Series + 3 more blocksDuration: 1 hStudents will Identify the use of an SQL Injection through the use of Wireshark.

Hands-on labStationX Membership

Analyze Various Data Sources to Confirm Suspected InfectionCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will review network traffic to confirm the presence of malicious activity using various tools including Wireshark and VirusTotal.com.

Hands-on labStationX Membership

Assessing Vulnerabilities Post AddressalCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will use Snorby against multiple systems to identify and mitigate any vulnerabilities found.

Hands-on labStationX Membership

BitCoin Mining Web Application on Corporate NetworkThreat Intelligence & DefenseDuration: 1 hStudents will identify unauthorized activity on a corporate network.

Hands-on labStationX Infrastructure Labs

Can You Capture and Analyze Network Traffic and Logging by Performing Management Tasks?CySA+: Cyber Security AnalystLevel: AdvancedDuration: 45 minIn this lab, you will capture network traffic by using tcpdump.

Hands-on labStationX Infrastructure Labs

Can You Discover Vulnerabilities Over a Network?Security Threat IntelligenceLevel: AdvancedDuration: 45 minIn this lab, you will discover vulnerabilities over a network.

Hands-on labStationX Infrastructure Labs

Can You Establish Secure Communications by Using SSH and Wireshark?Security Threat IntelligenceLevel: AdvancedDuration: 45 minIn this lab, you will establish secure communications by using SSH and Wireshark.

Hands-on labStationX Infrastructure Labs

Can You Evaluate Account Security Threats?CySA+: Cyber Security AnalystLevel: AdvancedDuration: 45 minIn this lab, you will create a sign in failure, and then you will review the event in the event log.

Hands-on labStationX Infrastructure Labs

Can You Examine Network Communications by Using Incident Response Tools?Cyber Security Incident ResponseLevel: AdvancedDuration: 45 minIn this lab, you will examine network communications by using incident response tools.

Hands-on labStationX Infrastructure Labs

Can You Implement a Host-Based Intrusion Detection System?CySA+: Identify Network VulnerabilitiesLevel: AdvancedDuration: 1 hIn this lab, you will implement a host-based intrusion detection system (HIDS).

Hands-on labStationX Infrastructure Labs

Can You Implement Intrusion Detection by Using Wazuh?Introduction to Vulnerability AnalystLevel: GuidedDuration: 1 hIn this lab, you will implement intrusion detection by using Wazuh.

Hands-on labStationX Infrastructure Labs

Can You Improve Network Security with SSH, HTTPS, and IPSec?Introduction to Vulnerability AnalystLevel: AdvancedDuration: 45 minIn this lab, you will improve network security with SSH, HTTPS, and IPSec.

Browse everything

Filter results

Type

Lab difficulty

Duration

Exam

Topic

Included in