Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 1
Included in: Membership LabsClear all
388 results — showing 1–100
Hands-on labStationX Membership
Additional Scanning OptionsCyber Defense Analyst Training Series + 2 more blocksDuration: 1 hStudents will leverage Nmap, a network discovery and mapping tool, to identify the systems on a network of responsibility.
Hands-on labStationX Membership
Applying Filters to TCPDump and WiresharkCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with applying a capture filter to TCPDump and Wireshark using Berkley Packet Filter (BPF) syntax.
Hands-on labStationX Membership
Auditing Service Accounts and Setting Up Automated Log CollectionCritical Security Controls + 4 more blocksDuration: 2 hStudents will explore information-gathering techniques, audit service accounts in a Windows Environment, collect Windows logs, and automate log transfer with Syslog.
Hands-on labStationX Membership
Baseline Systems in Accordance with Policy DocumentationCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hStudents are provided a whitelist of applications allowed for installation on a system.
Hands-on labStationX Membership
Basics of MetasploitCyber Security Fundamentals + 2 more blocksDuration: 2 hIn this lab we will dive into exploiting machines in our test environment.
Hands-on labStationX Membership
BCP DRP and Test PlanningCyber Security Fundamentals + 1 more blockDuration: 2 hIn this lab, students will gain hands-on experience with key organizational resilience documents, including the Business Continuity Plan (BCP), Business Impact Assessment (BIA), and Disaster…
Hands-on labStationX Membership
BitLocker SetupCritical Security Controls + 1 more blockDuration: 1 hThis lab shows the student how to setup BitLocker on a Windows 8.1 Professional system.Hands-on labStationX Membership
Block Incoming Traffic on Known PortCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hIn this lab, the student will respond to an incident by blocking incoming traffic on a known port from a specific IP.Hands-on labStationX Membership
Centralized MonitoringCritical Security Controls + 2 more blocksDuration: 1 hIn this lab, students will learn how to ingest log data into Splunk by first manually uploading log files for analysis.Hands-on labStationX Membership
CIRP Creation and DisasterCritical Security Controls + 1 more blockDuration: 2 hStudents will become familiar with the creation of a Cyber Incident Response Plan (CIRP).Hands-on labStationX Membership
Comparing ControlsCritical Security Controls + 3 more blocksDuration: 1 hStudents will evaluate policies in place on a domain and apply those policies in accordance to organizational standards.
Hands-on labStationX Membership
Conduct Baseline Comparison for Indicators of CompromiseCyber Security Professional + 1 more blockDuration: 1 hLearners will create a system baseline operating snapshot using the Window Forensic Toolchest (WFT) and compare it against a previously created baseline using the KDiff3 application to identify any…Hands-on labStationX Membership
Creating a Baseline Using AutopsyCyber Defense Forensics Analyst Training Series + 2 more blocksDuration: 1 hStudents will run Autopsy against an existing system to create a baseline that will be used for future analysis.Hands-on labStationX Membership
Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerCyber Defense Forensics Analyst Training Series + 5 more blocksDuration: 1 hStudents will create a list of installed programs, services, and accounts in a Windows 2012 server environment using various tools and methods.
Hands-on labStationX Membership
Creating a Secondary Baseline and Conducting ComparisonCyber Security Professional + 1 more blockDuration: 1 hStudents will create a second baseline using Autopsy and compare it against a previously created baseline using KDiff3.Hands-on labStationX Membership
Creation of BCP and DRPCyber Security Fundamentals + 1 more blockDuration: 3 hStudents will be required to create two documents: a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP).Hands-on labStationX Membership
Creation of Standard Operating Procedures for RecoveryCritical Security Controls + 1 more blockDuration: 1 hStudents will have access to the results of a vulnerability scan run again a sample Windows 2008 Server.
Hands-on labStationX Membership
Cryptography: Attacking Classic CiphersCryptography Attack and DefenceDuration: 2 hTraining on how to use GPG with a GPG challenge at the end.
Hands-on labStationX Membership
Cryptography: Breaking Repeated Key XOR CipherCryptography Attack and DefenceDuration: 4 hThis lab walks students through how to attack a repeated key XOR cipher, and then provides a challenge to the student in the form of a fixed plaintext encrypted with a random key.Hands-on labStationX Membership
Cryptography: Breaking Weak RSA KeysCryptography Attack and DefenceDuration: 1 hStudents will be shown various tools for attacking and using RSA public key information.Hands-on labStationX Membership
Cryptography: Decrypting Files With a Dictionary AttackCryptography Attack and DefenceDuration: 2 hStudents are given two files and are charged with decrypting both.The first one has the password given, and the second they must brute force the password with a dictionary attack.Hands-on labStationX Membership
Cryptography: Forging Digital SignaturesCryptography Attack and DefenceDuration: 3 hStudents will be given an ElGamal Signature Oracle and charged with recognizing an insecure use of it, and exploiting that to calculate the private key.Hands-on labStationX Membership
Cryptography: Forging MACs With Side ChannelsCryptography Attack and DefenceDuration: 2 hStudents will be faced with a MAC protocol and they must exploit a timing side channel information leak to forge a MAC on a message.Hands-on labStationX Membership
Cryptography: Hidden Veracrypt ContainersCryptography Attack and DefenceDuration: 2 hStudents will be shown how to create Veracrypt encrypted containers and will be challenged with creating a hidden container which contains provided files.Hands-on labStationX Membership
Cryptography: Man In the Middle AttackCryptography Attack and DefenceDuration: 2 hStudents will be placed in the middle of an encrypted chat session.Hands-on labStationX Membership
Cryptography: Password CrackingCryptography Attack and DefenceDuration: 1 hTraining on how to use GPG with a GPG challenge at the end.Hands-on labStationX Membership
Cryptography: Setting Up HTTPS in Windows and LinuxCryptography Attack and DefenceDuration: 2 hSetting up HTTPS enabled Web Servers in Linux and Windows Duration 2 hoursHands-on labStationX Membership
Cryptography: Setting Up Two Factor AuthenticationCryptography Attack and DefenceDuration: 2 hSet up 2FA in Windows and Linux Duration 2 hours
Hands-on labStationX Membership
Cryptography: SteganographyCryptography Attack and Defence + 2 more blocksDuration: 2 hIn this lab, students will learn: How information can be hidden in cover files.Hands-on labStationX Membership
Cryptography: Using GPG for Encryption and Key ManagementCryptography Attack and Defence + 2 more blocksDuration: 1 hTraining on how to use GPG with a GPG challenge at the end.Hands-on labStationX Membership
Cryptography: Using the OpenSSL CLI ToolCryptography Attack and DefenceDuration: 2 hTraining on how to use OpenSSL CLI tool with a challenge at the end.Hands-on labStationX Membership
Data Backup to Prep for RecoveryCritical Security Controls + 6 more blocksDuration: 1 hIn this lab we will simulate the recovery phase where we must perform a backup in a server environment.Hands-on labStationX Membership
Data Downloads and ValidationCritical Security ControlsDuration: 1 hIn this lab, students will learn to validate downloads to mitigate risk.
Hands-on labStationX Membership
DNS as a Remote ShellIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee to become familiar with recognizing remote shells that operate using well known ports such as DNS.Hands-on labStationX Membership
Event LogCyber Security FundamentalsDuration: 1 hIn this lab, the trainee will have the opportunity to review event log files associated with the Windows 7 operating system.
Hands-on labStationX Membership
Firewall Setup and ConfigurationCyber Defense Analyst Training Series + 7 more blocksDuration: 1 hIn this lab you will perform the steps necessary to set up a pfSense firewall from the basic command line interface and then configure the firewall using the web configuration GUI on a Windows…Hands-on labStationX Membership
Force Point: DLP Email OverviewCritical Security ControlsDuration: 1 hForcepoint DLP will teach the student how to configure Forcepoint DLP to stop data loss on the email channel.Hands-on labStationX Membership
Force Point: DLP Network OverviewCritical Security ControlsDuration: 1 hDLP network: Monitors and enforces DLP policies across several communication channels, including email, web, IM, network printing.Hands-on labStationX Membership
Gap Analysis of Firewall RulesCyber Defense Analyst Training Series + 2 more blocksDuration: 2 hStudents will log into an organization's firewall, document existing firewall rules, analyze these rules and making recommendations based on this analysis.Hands-on labStationX Membership
Host Data Integrity BaseliningCyber Security Fundamentals + 1 more blockDuration: 1 hIn this lab, trainees will explore the fundamentals of establishing file and directory baselines using both Kali Linux and Windows 11.Hands-on labStationX Membership
Identifying Key AssetsCritical Security ControlsDuration: 1 hStudents will use nmap to identify specific assets on their network.Hands-on labStationX Membership
Implementing Least-Privilege on WindowsCyber Security Professional + 2 more blocksDuration: 1 hLeast-privilege is an important concept across many domains (e.g., Windows server/workstation management, networking, Linux management, etc.) and requires great discipline to implement properly.
Hands-on labStationX Membership
Installing Patches and Testing SoftwareCyber Defense Incident Responder + 1 more blockDuration: 2 hStudents will identify if a vulnerability is present in the systems and remediate the vulnerability if necessary.Hands-on labStationX Membership
Leveraging Internal Intelligence ResourcesCritical Security ControlsDuration: 1 hStudents will leverage Zenmap and Tenable Nessus vulnerability scanner in order to perform an internal scan of networked resources.Hands-on labStationX Membership
Log Correlation & Analysis to Identify Potential IOCCritical Security Controls + 1 more blockDuration: 1 hWhen defending networked digital systems, attention must be paid to the logging mechanisms set in place to detect suspicious behavior.Hands-on labStationX Membership
Manually Creating a Baseline with MD5DeepCyber Defense Analyst Training Series + 3 more blocksDuration: 1 hStudents will create a baseline on a documents folder using md5deep.Hands-on labStationX Membership
MITRE - AttackCyber Security Fundamentals + 1 more blockDuration: 1 hThis lab demonstrates the process that Advanced Persistent Threat (APT) actors use to gain initial access to organizations using phishing campaigns and malicious documents.Hands-on labStationX Membership
MITRE - DefendCyber Security Fundamentals + 1 more blockDuration: 1 hThis lab is designed to teach defenders how to use Mitre ATT&CK and Mitre Navigator to research potential APTs that will target their organization and how to prioritize their defensive efforts.Hands-on labStationX Membership
Monitoring and Verifying Management SystemsCritical Security Controls + 6 more blocksDuration: 1 hIn this lab, students will use Nessus Essentials to assess a system for vulnerabilities and generate a detailed analysis report.Hands-on labStationX Membership
Network DiscoveryCyber Defense Analyst Training Series + 4 more blocksDuration: 2 hThe Network Discovery lab is designed to help students facilitate open source collection by teaching them how to use more intimate network discovery techniques.Hands-on labStationX Membership
Network Segmentation (FW/DMZ/WAN/LAN)Cyber Defense Analyst Training Series + 8 more blocksDuration: 1 hCreate three distinct areas for this network, route traffic accordingly and lock down VPN access to the appropriate IP address.Hands-on labStationX Membership
Network Topology GenerationCyber Defense Analyst Training Series + 5 more blocksDuration: 2 hIn this hands-on lab, students will gain practical experience using Zenmap, the graphical interface for Nmap, to perform network discovery and reconnaissance.Hands-on labStationX Membership
Open and Close Ports on Windows 7Critical Security Controls + 1 more blockDuration: 1 hIn this lab, the student will kill some processes and close down some shares in response to a suspected threat.Hands-on labStationX Membership
Open Source CollectionCyber Security Fundamentals + 1 more blockDuration: 2 hIn this hands-on lab, students will explore open-source information collection techniques using advanced Google search operators and be introduced to the Google Hacking Database (GHDB).Hands-on labStationX Membership
Open Source Password CrackingCyber Security Fundamentals + 3 more blocksDuration: 1 hStudents will use John the Ripper and Cain and Abel to crack various password protected file types on a Windows machine.Hands-on labStationX Membership
Phishing (2026)Critical Security ControlsDuration: 1 hIn this hands-on lab, students will explore the fundamentals of phishing attacks and user awareness by using the Social-Engineer Toolkit (SET) to create a phishing email and simulate a real-world…Hands-on labStationX Membership
PhishingCritical Security Controls + 1 more blockDuration: 1 hStudents will send a phishing email using the Social Engineering Toolkit.Hands-on labStationX Membership
Post Incident Service RestorationCritical Security Controls + 1 more blockDuration: 1 hIn this lab, students will focus on the recovery phase of incident response by restoring critical services on a compromised host in a post-incident environment.Hands-on labStationX Membership
RansomwareCritical Security ControlsDuration: 1 hStudents will learn what ransomware is, observe how it works, and implement mitigation strategies to recover from a ransomware attack.Hands-on labStationX Membership
Recover from SQL Injection AttackCritical Security Controls + 1 more blockDuration: 1 hAfter identifying a SQL Injection attack, students will learn about parameterized queries in back-end web servers to minimize future SQLi attacks.
Hands-on labStationX Membership
Recovering Data and Data Integrity ChecksSecurity BaselineDuration: 1 hIn this lab, the student will establish a baseline of two pre-defined files, delete those files, and subsequently restore them.Hands-on labStationX Membership
Scanning From WindowsCyber Defense Forensics Analyst Training Series + 4 more blocksDuration: 1 hStudents will leverage Scalnline, a windows network discovery and mapping tool, to identify the systems on a network of responsibility.Hands-on labStationX Membership
Sensitive Information IdentificationCritical Security ControlsDuration: 1 hStudents will utilize Data Loss Prevention (DLP) software to identify documents potentially containing sensitive information.Hands-on labStationX Membership
Setting Up Zones in a FirewallCyber Defense Incident Responder + 3 more blocksDuration: 1 hStudents will configure a pfSense Firewall to create/isolate various network segments.Hands-on labStationX Membership
Snorby Setup and OperationIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to expose trainees to perform an initial setup for Security Onion and to configure and install Snort and Snorby.Hands-on labStationX Membership
TCPDumpIntro to Network Security & Traffic AnalysisDuration: 1 hThis lab exercise is designed to allow the trainee become familiar with the basic command arguments and usage of TCPDump.Hands-on labStationX Membership
Tweaking Firewall Rules for DetectionCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hStudents will use organizational firewall for monitoring, detecting and auditing traffic on the network.Hands-on labStationX Membership
Using Snort and Wireshark to Analyze TrafficCyber Defense Analyst Training Series + 5 more blocksDuration: 1 hIn this lab we will replicate the need for Analysts to be able to analyze network traffic and detect suspicious activity.Hands-on labStationX Membership
Vulnerability Identification and RemediationCritical Security Controls + 1 more blockDuration: 1 hLearners will use Nmap and OpenVAS/Greenbone Vulnerability Scanner to confirm old vulnerable systems and to also discover new ones.Hands-on labStationX Membership
Windows Deployment ServicesSecurity BaselineDuration: 1 hAs an incident responder, it's important to understand how to create baseline Windows templates.Hands-on labStationX Membership
Windows Event Log Manipulation via Windows Event ViewerCyber Defense Incident Responder + 4 more blocksDuration: 1 hIn this lab you will use Windows Event Viewer to view and filter the security event log on a Windows 7 client computer specifically for account logons.Hands-on labStationX Membership
WiresharkCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hIn this hands-on lab, students will gain a foundational understanding of network traffic analysis using Wireshark.
Hands-on labStationX Membership
Backup and Restore Data in WindowsWindows Administration Fundamentals Duration: 2 hIn this lab students will backup and restore data by creating files and folders, backing up that data, and finally restoring the lost data using the Windows Server Backup tool.Hands-on labStationX Membership
Configure a Local Security Policy on Server 2019Windows Administration Fundamentals Duration: 2 hIn this lab students will configure account policies, then local user account settings.Hands-on labStationX Membership
Configure and Test the Firewall in WindowsWindows Administration Fundamentals Duration: 2 hIn this lab the students will configure the Windows Firewall.Hands-on labStationX Membership
Configure Network Load Balancing for a Web FarmWindows Administration Fundamentals Duration: 2 hIn this lab the students will configure network load balancing in a network that contains two web servers.Hands-on labStationX Membership
Configure Security Settings by Using Microsoft Group PolicyWindows Administration Fundamentals Duration: 2 hIn this lab students will will use Microsoft Active Directory to ensure that domain-joined computers adhere to organizational security policies.Hands-on labStationX Membership
Configure Standard Windows PermissionsWindows Administration Fundamentals Duration: 2 hIn this lab students will configure access to files and folders.Hands-on labStationX Membership
Configure Update Management in WindowsWindows Administration Fundamentals Duration: 2 hIn this lab students will manage Windows updates as a Windows Server Administrator.Hands-on labStationX Membership
Configure Windows Defender on a Windows SystemWindows Administration Fundamentals Duration: 2 hIn this lab the students will confirm that the Windows Defender service will block a potentially harmful software.Hands-on labStationX Membership
Configure Windows Firewall ACL RulesWindows Administration Fundamentals Duration: 2 hIn this lab the students will configure inbound and outbound firewall rules to control traffic for a specific server.Hands-on labStationX Membership
Disable User Account on Windows 10Cyber Defense Analyst Training Series + 1 more blockDuration: 1 hIn this lab, the student will respond to a suspected insider threat incident by disabling user accounts in Windows.Hands-on labStationX Membership
Install and Manage Windows Admin Center ExtensionsWindows Administration Fundamentals Duration: 2 hIn this lab the students will install and configure Windows Admin Center while also managing extensions.Hands-on labStationX Membership
Manage Users and Groups in WindowsWindows Administration Fundamentals Duration: 2 hIn this lab students will use PowerShell and Local Users and Groups tool to manage user and group accounts.Hands-on labStationX Membership
Use EFS to Encrypt Files on NTFS VolumesWindows Administration Fundamentals Duration: 2 hIn this lab students will use File Explorer to encrypt files and folders through Encrypting File System (EFS), and then test the configuration by attempting to access an encrypted file as a…Hands-on labStationX Membership
Using PowerShell to Analyze a SystemWindows Administration Fundamentals Duration: 1 hIn this lab, students will use PowerShell within a Windows Server 2025 environment to perform system enumeration and data analysis.Hands-on labStationX Membership
Advanced Techniques for Malware RecoveryCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will use the SysInternals Suite of utilities to analyze processes, DLLs, registry edits and other auto start functions to locate and remove malicious software from an infected Windows 7…Hands-on labStationX Membership
Analysis and Recommendation ReportCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will do a Vulnerability Assessment on a network.Hands-on labStationX Membership
Analyze and Classify MalwareCyber Defense Analyst Training Series + 1 more blockDuration: 1 hIn this lab you will attempt to conduct basic analysis on some malware samples that were found on the internal network.Hands-on labStationX Membership
Analyze and Update a Company BCP/BIA/DRP/CIRPCyber Defense Incident Responder + 3 more blocksDuration: 2 hStudents will become familiar with the Business Continuity Plan (BCP), Business Impact Assessment (BIA), Disaster Recovery Plan (DRP) and Computer Incident Response Plan (CIRP).Hands-on labStationX Membership
Analyze SQL Injection AttackCyber Defense Analyst Training Series + 3 more blocksDuration: 1 hStudents will Identify the use of an SQL Injection through the use of Wireshark.Hands-on labStationX Membership
Analyze Various Data Sources to Confirm Suspected InfectionCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will review network traffic to confirm the presence of malicious activity using various tools including Wireshark and VirusTotal.com.
Hands-on labStationX Membership
Assessing Vulnerabilities Post AddressalCyber Defense Analyst Training Series + 1 more blockDuration: 1 hStudents will use Snorby against multiple systems to identify and mitigate any vulnerabilities found.
Hands-on labStationX Membership
BitCoin Mining Web Application on Corporate NetworkThreat Intelligence & DefenseDuration: 1 hStudents will identify unauthorized activity on a corporate network.Hands-on labStationX Membership
Check for Indicators of Other Attack Activity (Debug PE File)Threat Intelligence & DefenseDuration: 2 hStudents will check for indications of other attack activity.Hands-on labStationX Membership
Collecting Logs and Verifying Syslog AggregationCyber Defense Analyst Training SeriesDuration: 2 hCollecting and aggregating logs are very essential to any organization.Hands-on labStationX Membership
Comprehensive Threat ResponseCyber Defense Analyst Training Series + 3 more blocksDuration: 2 hIn this final lab, we will attempt to exercise all the relevant skills found in this domain.
Hands-on labStationX Membership
Conduct Log Analysis and Cross Examination for False PositivesDigital Media Forensics + 1 more blockDuration: 1 hStudents will confirm the validity of event-data analysis to eliminate false-positive events.Hands-on labStationX Membership
Conduct Root Cause Analysis for System CrashesCyber Defense Analyst Training Series + 4 more blocksDuration: 1 hStudents will use utilize a specially loaded system to conduct analysis on a captured memory dump from a machine suffering from repeating system crashes.Hands-on labStationX Membership
Conduct Supplemental MonitoringCyber Defense Forensics Analyst Training Series + 3 more blocksDuration: 1 hIn this lab you implement supplemental monitoring solutions on a network using various Microsoft security tools and built-ins.Page 1 of 4 · Next →