Resources
BHIS Blog
Current cybersecurity commentary and technical guidance.
README
Poisoning the Well - Incident Response Labs This incident response lab allows for the investigation of logs from a cyber attack on a domain controller. Click here to access the labs.
Incident Response Labs
Poisoning the Well - Incident Response Labs Lab Objective In this lab, we will navigate through log files that simulate an attack on a corporate domain. Our goal is to illustrate how to investigate…
PingCastle
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ PingCastle Any VM Lab Objective In this lab…
PasswordSpray
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Password Spray Step 1: Disabling Defender…
PasswordCracking
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Password Cracking Ubuntu VM Lab Objective In…
Nmap
This is a lab from John Strand 's Information Security Core Skills Course: https://www.antisyphontraining.com/product/information-security-core-skills-tm/ Host Firewalls and Nmap Lab Objective In this…
Nessus Lab
This is a lab from John Strand 's SOC Core Skills Course: https://www.antisyphontraining.com/product/soc-core-skills-with-john-strand/ This is a lab from John Strand 's Information Security Core…
n8n Lab - Part 2
n8n - Part 2 - AI Integration For Part 1 , click here Ubuntu VM This part builds directly on Part 1. You need the workflow already created. Here we send an incoming alert to an AI model and have it…
n8n Lab - Pt 1
n8n - Part 1 - General Automation For Part 2 , click here Ubuntu VM In this lab we will Deploy n8n using Docker with persistent storage Explore the n8n web interface Build a simple HTTP-triggered…
Memory Analysis (Volatility) Lab
This is a lab from John Strand 's SOC Core Skills Course: https://www.antisyphontraining.com/product/soc-core-skills-with-john-strand/ Memory Analysis Please Use The Ubuntu VM Lab Objective In this…
LinuxCLI Lab
This is a lab from John Strand 's SOC Core Skills Course: https://www.antisyphontraining.com/product/soc-core-skills-with-john-strand/ Linux CLI For The Ubuntu VM In this lab we will be looking at a…
limacharlie
LimaCharlie Lab Part 1 of 2 In this lab we will be using LimaCharlie to investigate endpoint monitoring and threat detection. What is Lima Charlie? Lima Charlie is a lightweight browser based tool, it…