This site is in BETA. Labs are still being adjusted and re-structured and may not work as intended.

Resources

BHIS Blog

Current cybersecurity commentary and technical guidance.

hayabusa

July 29, 2026

For the Ubuntu VM The objective of this lab is to use Hayabusa to analyze Sysmon logs and detect suspicious activity related to process creation, network connections, and authentication events.

Intro Class Lab Navigation

July 29, 2026

Information Security Core Skills Applocker Atomic RedTeam and Bluespawn DeepBlueCLI Nessus Host Firewalls and Nmap Password Cracking Password Spraying External Password Spraying Responder RITA and AC…

Third Party Malware Injection

Third Party Malware Injection

July 29, 2026

Third-Party Malware Injection Software you trust can be turned against you. Third-party malware injection is when an attacker plants malicious code inside something legitimate - a library your app…

Startup Registry Injection

Startup Registry Injection

July 29, 2026

Startup Registry Injection The Windows Registry is a database that stores low-level settings for the operating system and for applications. Certain registry keys tell Windows what programs to run…

Service Recovery Hijacking

Service Recovery Hijacking

July 29, 2026

Service Recovery Hijacking When a Windows service crashes, the OS does not just sit there - it follows a set of recovery instructions you can configure. Those instructions can tell Windows to restart…

Malicious Email Rules

Malicious Email Rules

July 29, 2026

Malicious Email Rules When an attacker gets into someone's email account, the first thing they usually do is not read the emails. They set up rules. Email rules are a built-in feature of almost every…

Dormant Malware

Dormant Malware

July 29, 2026

Dormant Malware Dormant malware is malicious code that sits quietly on a system and does nothing - until something wakes it up. That trigger could be a specific date, a user logging in, the system…

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.

Something went wrong. A browser extension may be interfering with this page. Reload ×