Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.

Glastopf
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Glastopf Ubuntu VM Goal:…

FileAudit
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ File Audit Tripwires In…

FakeNet NG
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ FakeNet-NG For the Ubuntu…

DNSChef
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ DNSChef For the Ubuntu VM…

dionaea
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Dionaea Ubuntu VM In this…

CuckooSandbox
Cuckoo Sandbox Goal: See how Cuckoo Sandbox automatically analyzes suspicious files in an isolated Windows VM, and how an analyst can read the results. In this lab we will Install and initialize…

Cowrie
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Cowrie Ubuntu VM Website…

Canarytokens
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Canarytokens Any VM First,…

Caldera
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ MITRE CALDERA This lab is…

Beelzebub
This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Beelzebub Ubuntu VM…
hayabusa
For the Ubuntu VM The objective of this lab is to use Hayabusa to analyze Sysmon logs and detect suspicious activity related to process creation, network connections, and authentication events.
Third Party Malware Injection
Third-Party Malware Injection Software you trust can be turned against you. Third-party malware injection is when an attacker plants malicious code inside something legitimate - a library your app…