Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
scapy lab solution
Lab Solution: Covert TCP Channel This document contains the solution for the Scapy Covert TCP Channel lab. It includes two ready-to-run Python scripts ( sniffer_covert_tcp.py and sender_covert_tcp.py…
scapy lab
Lab: Covert TCP Channel This file does NOT include the full solution code . Use this to write your own and (or to understand what to look for in the solution). Overview — what you'll build You will…
powershell for soc
1. System Information Gathering Get basic system details: Get current user and logged-in users: List local users and groups: Check process list and services: 2. Log Collection and Event Analysis List…
lab2 collect system info
Lab 2: PowerShell - Collect Basic System Info and Save to File Goal In this lab, you'll write a PowerShell script to collect essential system information and save it to a file. This is especially…
toolsAndPlatforms
Security Tools & Foundational Platforms Security tools and foundational platforms are the core technologies used to detect, investigate, and respond to cyber threats. These include tools that collect…
elasticLabLocal
Elastic Local Lab Please go though the documenation and setup for the Local Version Now that we have set up Elastic , Kibana and Filebeat , we can finally get our hands dirty and learn how a SOC…
elasticLabCloud
Please go though the documenation and setup for the Cloud Version Elastic Cloud Lab GOAL Set up and use Elastic SIEM on your system Learn how to ingest logs and visualize them Learn how to use SIEM…
logAnalysis basics
Log Analysis Basics Hands-On Lab : Log Analysis Hayabusa Lab Log analysis involves reviewing system and security logs to detect unusual or malicious activity. Each log entry typically includes a…
welcome
Welcome! Future defenders, welcome! The fundamental abilities required to be a successful Security Operations Center (SOC) analyst will be covered in this course. You will participate in practical…
README
Welcome to the Free Lab Friday Lab Platform! Need 1 lab?? Maybe 2???? Well we've got 200+ so go crazy! This repository contains all lab instructions for the following content: Information Security…
WireGuardLab
Dissecting WireGuard Traffic Capture file: Topology: Role IP Address UDP Port Initiator (Peer 1) Responder (Peer 2) Both peers use port 51820 - this is a symmetric peer-to-peer setup, not a…
Port Knocking Lab
Port Knocking on the Wire Capture file: Topology Role IP Address MAC Address Notes Knocking client (valid) 10.42.0.7 00:11:22:33:44:55 Completes correct sequence Protected server 192.0.2.55…