Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.

FakeNet NG
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ FakeNet-NG For the Ubuntu…

DNSChef
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ DNSChef For the Ubuntu VM…

Dionaea Lab
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Dionaea Ubuntu VM In this…

CuckooSandbox
Cuckoo Sandbox Goal: See how Cuckoo Sandbox automatically analyzes suspicious files in an isolated Windows VM, and how an analyst can read the results. In this lab we will Install and initialize…

Cowrie
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Cowrie Ubuntu VM Website…

Canarytokens Lab
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Canarytokens Any VM First,…

Caldera
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ MITRE CALDERA This lab is…

Beelzebub
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Beelzebub Ubuntu VM…
hayabusa
For the Ubuntu VM The objective of this lab is to use Hayabusa to analyze Sysmon logs and detect suspicious activity related to process creation, network connections, and authentication events.
Intro Class Lab Navigation
Information Security Core Skills Applocker Atomic RedTeam and Bluespawn DeepBlueCLI Nessus Host Firewalls and Nmap Password Cracking Password Spraying External Password Spraying Responder RITA and AC…
Third Party Malware Injection
Third-Party Malware Injection Software you trust can be turned against you. Third-party malware injection is when an attacker plants malicious code inside something legitimate - a library your app…
Startup Registry Injection
Startup Registry Injection The Windows Registry is a database that stores low-level settings for the operating system and for applications. Certain registry keys tell Windows what programs to run…