Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
PSR hard
Hard CTF - Full Physical Intrusion Simulation You are a red team operator tasked with gaining access to the internal network of a financial firm. You have been given permission to test physical…
PSR easy 2
Easy CTF 2 - Surveillance Gap Analysis A reviewer is mapping camera coverage across a three-floor office building. They produce the following notes: The building has one security guard posted at the…
PSR easy 1
Easy CTF 1 - Badge and Entry Basics A security reviewer is assessing a mid-sized office. During the walkthrough, they notice that the front entrance uses RFID badge readers. They borrow a colleague's…
Physical Medium as Exfil
Physical Medium as Exfil Data exfiltration does not always happen over the internet. Sometimes, the simplest way to steal data is to walk out with it. Physical medium exfiltration is exactly that -…
PME medium
Medium CTF - The Insider An employee at a healthcare company has been giving notice of resignation. On his last week, the DLP system flags an unusual spike in local file access on his workstation. You…
PME hard
Hard CTF - Full Exfil Chain During a red team engagement, you are reviewing the findings report. The red teamers documented the following chain of events: Question The red team split the operation…
PME easy 2
Easy CTF 2 - Log the Copy You are reviewing endpoint logs after a security review flagged an anomaly. You find the following entries on a workstation in the finance department: The workstation was…
PME easy 1
Easy CTF 1 - Spot the Device A red teamer walks into the target company's office posing as an IT contractor. He is given a brief tour of the server room. While the guide steps out to take a call, he…
New User Added
New User Added When attackers get into a system, their first concern is staying in. One of the simplest ways to do that is creating a new user account - one they control, one that blends in, and one…
Malicious Service
Malicious Service A malicious service is a system service that an attacker has either created from scratch or modified after gaining access to a machine. The goal is simple: survive reboots and keep…
Malicious Firmware
Malicious Firmware Firmware is the low-level software baked into hardware - your BIOS, UEFI, network cards, video cards, and more. It runs before the operating system even loads, which makes it…
Malicious Driver
Malicious Driver A malicious driver is a device driver that has been installed or tampered with by an attacker to maintain control over a system - even after it reboots. Because drivers run at the…