Lab 01Intermediate
Detection Engineering
Author a Mimikatz Sigma rule, validate ATT&CK tags, and convert to SPL and KQL.
Cyber Labs
Seven hands-on labs built from real SOC and security engineering experience.
- 7 labs
- 35+ exercises
- 15+ ATT&CK techniques
Lab 02Intermediate
Cloud Security Audit
Audit a mock AWS account against CIS v1.5 and build a phased remediation plan.
Lab 03Advanced
Threat Hunting
Hunt 8 hidden TTPs across 500 simulated log events using 6 ATT&CK hypotheses.
Lab 04Advanced
DFIR Investigation
Analyze artifacts from a compromised endpoint, extract IOCs and write the IR report.
Lab 05Intermediate
Phishing Analysis and IR
Triage 3 campaigns, analyze SPF, DKIM and DMARC, and trigger response playbooks.
Lab 06Expert
Penetration Testing
Run the PTES kill chain against a Metasploitable 2 topology, from recon to report.
Lab 07Advanced
Zero Trust and Network Security
Design a default-deny mTLS lab, simulate 6 attacks, and score against NIST 800-207.
About the labs
Each lab is a standalone Python script with guided exercises, embedded attacker TTPs and a challenge extension at the end.
Every lab runs with no cloud credentials or special environment. Labs 6 and 7 include live VM instructions for when you're ready to go beyond simulation.