Browse the Full Catalog

Gain hands-on experience creating a Windows Server virtual machine by using Amazon Elastic Compute Cloud (EC2). Lab activities include: creating a new key pair to decrypt the password for an EC2 instance, creating a security group to allow access, and creating and connecting to an EC2 instance using an Amazon Machine Image (AMI) and RDP.

In this lab, students will configure two EC2 instances as web servers. Students will then create a target group and create a load balancer for the EC2 instances.

In this challenge lab, you will create multiple S3 buckets, enable version control, server access logging, S3 encryption, public access, public website hosting, and will upload files to serve as a static website.

In this challenge, you will create a custom VPC with public and private subnets, and an Internet and NAT Gateway. You will then associate route tables with the correct subnets.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This AWS CCP course will teach you how to prepare for the exam.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This AWS CCP course will teach you AWS core services.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This AWS CCP course will teach you fundamental security concepts of AWS.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This AWS CCP course will teach you billing for AWS.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This AWS CCP course will teach you fundamental cloud concepts.

Learn the foundational principles of Amazon Web Services (AWS), the world’s most comprehensive and broadly adopted cloud platform. This brief course introduces the AWS Cloud Practitioner certification.

Prepare for the AWS Certified Security Specialist (SCS-C02) exam. Amazon recommends candidates have at least 5 years of IT security experience in designing and implementing security solutions, and hands-on experience securing AWS workloads. The exam covers: Incident Response, Logging & Monitoring, Infrastructure Security, IAM, and Data Protection.

Gain hands-on experience implementing a security monitoring process with AWS CloudTrail. Lab activities include: setting up CloudTrail to track management events, configuring a topic by using Amazon SNS, configuring Amazon CloudWatch Logs by using a metric filter, configuring an alarm for a log group, and reviewing the CloudTrail trail.

In this lab, you will learn how to protect sensitive information in an AWS environment. First, you will create an Amazon EC2 key pair to provide a secure connection to an instance. Then add and upload the key to the AWS Systems Manager Parameter Store. Finally, you will store a set of access key credentials in the AWS Secrets Manager.

In this lab, students will create a network Access Control List (ACL) that only allows specific traffic to a subnet. Students will then attempt to access a Web server through the ACL.

Gain hands-on experience creating an Identity and Access Management (IAM) role to access an Amazon Simple Storage Service (Amazon S3) bucket from an Elastic Compute Cloud (EC2) instance. Activities include: creating an Amazon S3 bucket, creating an IAM policy that provides full control of the bucket, and testing the policy in a new EC2 instance.

Gain hands-on experience creating an Identity and Access Management (IAM) user that has full administrator access. Lab activities include: creating an IAM user, creating a user group, assigning a user to the group, attaching a policy to the group, and implementing multi-factor authentication for the root account.

Gain hands-on experience creating an AWS Identity and Access Management (IAM) policy to manage an Amazon S3 bucket. Lab activities include: creating an IAM policy and user group, adding a user account to the group, creating an S3 bucket, adding an object to the bucket, and attempting to delete both the object and the bucket.

In this brief AWS CSS: Preparing for the Exam course, you will learn how to decipher exam questions and get advice on how to study for the certification exam.

In this AWS CSS: Management and Security Governance course, you will learn about AWS Organizations, designing secure and consistent deployment strategies for cloud resources, and how to identify security gaps through architectureal reviews and cost analysis in AWS.

In this AWS CSS: Data Protection course, you will learn about key managment solutions, designing and evaluating data encryption solutions, and designing mechanisms to forward traffic over secure connections

In this AWS CSS: Identity and Access Management course, you will learn about Active Directory and AWS Directory Service, designing scalable systems to access AWS resources, and identifying issues when accessing AWS resources.

In this AWS CCS: Security Logging and Monitoring course, you will learn about automated monitoring services, designing security logging, monitors, and alerts, and security reference architecture (SRA).

In this AWS CCS: Security Logging and Monitoring course, you will learn about automated monitoring services, designing security logging, monitors, and alerts, and security reference architecture (SRA).

In this AWS CSS: Threat Detection and Incident Response course, you will learn about AWS acceptable use, unauthorized activtities, and AWS Config.

The CompTIA PenTest+ certification exam is for cybersecurity professionals tasked with penetration testing and vulnerability management. Testers will be required to demonstrate hands-on skills and knowledge to test devices in environments such as the cloud and mobile, in addition to traditional desktops and servers.

In this hands-on challenge, you will practice researching log events related to a reported spearphishing attack.

In this hands-on challenge, you will practice researching network observables.

In this hands-on challenge, you will practice analyzing log events related to Windows authentication.

In this hands-on challenge, you practice profiling a suspicious process on a Windows system.

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

CVE-2024-23897 is a critical security flaw affecting Jenkins, a Java-based open-source automation server widely used for application building, testing, and deployment. It allows unauthorized access to files through the Jenkins integrated command line interface (CLI), potentially leading to remote code execution (RCE).

In this hands-on challenge, you will practice using SIEM search expressions to locate suspicious activity related to XRDP traffic.

CVE-2023-27524 is a critical vulnerability in Apache Superset, affecting versions up to 2.0.1. It enables attackers to bypass authentication by exploiting weak or default SECRET_KEY values. Attackers can forge session cookies to gain admin access, leading to potential remote code execution and unauthorized data access.

‍

Confluence suffers from a Broken Access Control vulnerability that affects Data Center and Server versions 8.0.0 to 8.3.2, 8.4.0 to 8.4.2, and 8.5.0 to 8.5.1. Threat actors exploit this vulnerability to obtain administrator access to Confluence servers. Put on your Red Team hat to create your own malicious admin account leveraging this CVE!

Royal is a spin-off group of Conti, which first emerged in January of 2022. The group consists of veterans of the ransomware industry and brings more advanced capabilities and TTPs against their victims. Begin this campaign to learn how to detect and protect against this newer APT group!

Magic Hound (APT35) is an Iranian state-sponsored threat group that primarily targets organizations across various industries and geographic regions through cyber espionage. Launch this campaign to start detecting the sophisticated techniques leveraged by this threat group.

Raspberry Robin is a malware family that continues to be manipulated by several different threat groups for their purposes. These threat actors (Clop, LockBit, and Evil Corp) specialize in establishing persistence on a compromised host and creating remote connections to use later. Once established, these C2 connections can be used for multiple purposes, including data exfiltration, espionage, and even further exploitation.

Threat actors will use stolen data exfiltrated from victim systems to extort organizations. Once they gain a foothold, they delete critical system files and threaten to release the data or disrupt operations if the victims do not pay up. Understanding these techniques is vital to defending your organization from such attacks.

Threat actors continue to leverage ransomware to extort victim organizations. What was once a simple scheme to encrypt target data has expanded to include data disclosure and targeting a victim’s clients or suppliers. Understanding the techniques threat actors use in these attacks is vital to having an effective detection and mitigation strategy.