StationX
Start free

← All labs

Cyber Defense Forensics Analyst Training Series

Blue Team · 70 labs · ≈ 85 h of hands-on labs · Unlimited attempts — included in StationX Membership

🔒 StationX Membership — $299 / year ($24.92/mo billed annually) · Already have it? Sign in with StationX

  1. Analyze Malicious Network Traffic (Scored)Duration: 2 h
  2. Auditing Service Accounts - ScoredDuration: 1 h
  3. Auditing Service Accounts and Setting Up Automated Log Collection - ScoredDuration: 2 h
  4. Baseline Systems in Accordance with Policy Documentation - ScoredDuration: 1 h
  5. Conduct Root Cause Analysis for System Crashes (Scored)Duration: 1 h
  6. Conduct Supplemental MonitoringDuration: 1 h
  7. Control Assessment and Evaluation (Scored)Duration: 1 h
  8. Creating a Baseline Using Autopsy (v.2023) - ScoredDuration: 1 h
  9. Creating a Case in FTK (v.2025) - ScoredDuration: 2 h
  10. Creating a Forensic Image (v.2023) - ScoredDuration: 1 h
  11. Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server (Scored)Duration: 1 h
  12. Cryptography: Steganography (Scored)Duration: 2 h
  13. Cryptography: Using GPG for Encryption and Key Management (Scored)Duration: 1 h
  14. Data Backup to Prep for Recovery (Scored)Duration: 1 h
  15. Data Recovery with Autopsy (Scored)Duration: 1 h
  16. Denial of Service PCAP Analysis - ScoredDuration: 1 h
  17. Dynamic Malware Analysis (Scored)Duration: 1 h
  18. Event Log Collection with Splunk (Scored)Duration: 1 h
  19. Hash Verification (v.2024) - ScoredDuration: 1 h
  20. Host Identification Scanning via WindowsDuration: 1 h
  21. Host Identification Scanning with Linux (Scored)Duration: 1 h
  22. Identify Access to a LINUX Firewall Through SYSLOG Service (Scored)Duration: 1 h
  23. Implement Single System Changes in Firewall (v.2026)Duration: 1 h
  24. Import Nexpose Vulnerability Data into QRadarDuration: 1 h 30 min
  25. Intro to Linux - Routing and SSH Tunnels (Scored)Duration: 2 h
  26. Introduction to SquertDuration: 1 h
  27. Lab Environment Orientation - *** (Start Here!) ***Duration: 1 h
  28. Live Imaging with FTK Imager LiteDuration: 1 h
  29. LNX101 - OpenSSH Installation, Configuration, and Hardening - ScoredDuration: 1 h
  30. LNX101 - Setting Up a Firewall With UFW and FirewalldDuration: 1 h
  31. LNX101 - Telnet vs. SSHDuration: 1 h
  32. Log Event Reports (v.2026)Duration: 1 h
  33. Manual Vulnerability Assessment - ScoredDuration: 1 h
  34. Manually Analyze Malicious PDF Documents (Scored)Duration: 1 h
  35. Manually Analyze Malicious PDF Documents 2 (Scored)Duration: 1 h
  36. Manually Creating a Baseline with MD5Deep - ScoredDuration: 1 h
  37. Memory Extraction and Analysis (Scored)Duration: 1 h
  38. Nessus Scanning and Reporting (v.2026)Duration: 1 h
  39. Nexpose: Blue Team RemediationDuration: 3 h
  40. Overview of KibanaDuration: 1 h
  41. PAM LabDuration: 1 h
  42. Parse Files Out of Network Traffic (Scored)Duration: 1 h
  43. Participate in Attack Analysis Using Trusted Tool Set (Scored)Duration: 1 h
  44. Patching With WSUS (Scored)Duration: 2 h
  45. Pentesting & Network Exploitation - Linux Target Analysis Labs (Scored)Duration: 2 h
  46. Preliminary Scanning (v.2024) - ScoredDuration: 1 h
  47. Protect Against Beaconing (Scored)Duration: 1 h
  48. Recover from Incident (Scored)Duration: 2 h
  49. Recovery From Inadequate PatchingDuration: 2 h
  50. Registry Analysis (v.2025) - ScoredDuration: 2 h
  51. Rogue Device Identification and Blocking - ScoredDuration: 1 h
  52. Scanning From Windows (Scored)Duration: 1 h
  53. Scanning with NmapDuration: 1 h
  54. Securing Linux - FirewallsDuration: 1 h
  55. Securing Linux for System Administrators (Scored)Duration: 1 h
  56. Setting up Filters and Queries in KibanaDuration: 1 h
  57. Snap ExploitDuration: 1 h
  58. Snort Signatures, IDS Tuning, and Blocking (Scored)Duration: 1 h
  59. Specialized Linux Port ScansDuration: 1 h
  60. Threat Designation - ScoredDuration: 1 h
  61. Tweaking Firewall Rules for Detection (Scored)Duration: 1 h
  62. Use pfTop to Analyze Network Traffic - ScoredDuration: 1 h
  63. Using Snort and Wireshark to Analyze Traffic (v.2026) - ScoredDuration: 1 h
  64. Validate Indications of Compromise: Analysis of PE FileDuration: 1 h
  65. WebApp Attack PCAP Analysis - ScoredDuration: 1 h
  66. Whitelist IP Address from IDS AlertsDuration: 1 h
  67. Windows Event Log Manipulation via Windows Event Viewer (v.2026)Duration: 1 h
  68. Windows System Hardening with Group Policy & Active Directory (v.2026)Duration: 2 h
  69. Windows System Hardening with PowerShell (v.2026) - ScoredDuration: 2 h
  70. Wireshark (v.2026) - ScoredDuration: 1 h

Scored: A scored lab checks your work and records a score you can see on the lab page.