This site is in BETA. Labs are still being adjusted and re-structured and may not work as intended.

Resources

BHIS Blog

Current cybersecurity commentary and technical guidance.

Glastopf

Glastopf

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Glastopf Ubuntu VM Goal:…

FileAudit

FileAudit

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ File Audit Tripwires In…

FakeNet NG

FakeNet NG

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ FakeNet-NG For the Ubuntu…

DNSChef

DNSChef

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ DNSChef For the Ubuntu VM…

dionaea

dionaea

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Dionaea Ubuntu VM In this…

CuckooSandbox

CuckooSandbox

July 29, 2026

Cuckoo Sandbox Goal: See how Cuckoo Sandbox automatically analyzes suspicious files in an isolated Windows VM, and how an analyst can read the results. In this lab we will Install and initialize…

Cowrie

Cowrie

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Cowrie Ubuntu VM Website…

Canarytokens

Canarytokens

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Canarytokens Any VM First,…

Caldera

Caldera

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ MITRE CALDERA This lab is…

Beelzebub

Beelzebub

July 29, 2026

This is a lab from John Strand 's Active Defense and Cyber Deception Course: https://www.antisyphontraining.com/product/active-defense-and-cyber-deception-with-john-strand/ Beelzebub Ubuntu VM…

hayabusa

July 29, 2026

For the Ubuntu VM The objective of this lab is to use Hayabusa to analyze Sysmon logs and detect suspicious activity related to process creation, network connections, and authentication events.

Third Party Malware Injection

Third Party Malware Injection

July 29, 2026

Third-Party Malware Injection Software you trust can be turned against you. Third-party malware injection is when an attacker plants malicious code inside something legitimate - a library your app…

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.

Something went wrong. A browser extension may be interfering with this page. Reload ×