Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
Endpoint Security Protection Analysis CTF Quiz
Test your knowledge of Endpoint Security Protection Analysis with this CTF quiz!
Endpoint Analysis CTF Quiz
Test your knowledge of Endpoint Analysis with this CTF quiz!
Crisis Management CTF Quiz
Test your knowledge of Crisis Management with this CTF quiz!
Cloud Event Log Analysis CTF Quiz
Test your knowledge of Cloud Event Log Analysis with this CTF quiz!
Active Defense And Cyber Deception CTF Quiz
Test your knowledge of Active Defense And Cyber Deception with this CTF quiz!
Crisis Management
Crisis Management When a cybersecurity incident hits, the technical side is only half the battle. The other half is knowing what to do, who does what, and how fast you can contain the damage. That is…
Cloud Event Log Analysis
Cloud Event Log Analysis Cloud systems generate logs for everything - logins, API calls, file access, configuration changes, network connections. When something goes wrong, those logs are often the…
Active Defense And Cyber Deception
Active Defense and Cyber Deception Active defense and cyber deception focus on guiding attackers into controlled environments instead of only trying to block them. Defenders create systems that look…
uboatrat
UBoatRAT - BITS Job Abuse, Dead-Drop Resolution, and One-Shot Beacon Analysis Windows VM · Ubuntu VM Objective In this lab, you will reconstruct a restricted, benign simulation of UBoatRAT-style…
sliver
Sliver C2 Lab Goal The goal of this lab is to introduce Sliver C2 Framework . We will demonstrate how a Command and Control framework operates with the use of Sliver . In this lab you will Learn the…
mythic
Mythic C2 Framework - AWS Deployment Ubuntu VM (management) · AWS EC2 (Mythic Server) · Windows VM (target) In this lab we will Deploy a Mythic C2 server on AWS EC2 using a CloudFormation template…
leviathan
Leviathan: Initial Access & BITS Exfiltration Windows & Ubuntu VMs Lab Objective The objective of this lab is to use the Leviathan Framework to gain initial access to a target Windows machine, and…