Operations
Long, multi-stage scenarios across a realistic enterprise network. Attack it, defend it or keep it running.
Choose your operation
Select a mascot to jump to its briefing.
Goblins Incorporated
Goblins Incorporated
Offensive operation 01
Goblins Incorporated is a fast-growing enterprise whose rapid expansion has left security gaps across its corporate network, cloud infrastructure and development environment.
Conduct an enterprise-wide penetration test across a hybrid corporate environment. Exploit a public-facing entry point, investigate Active Directory misconfigurations, abuse cloud identities and uncover weaknesses in development systems. Chain vulnerabilities and privilege escalation paths to demonstrate the impact of a compromise across the organisation.
Defensive operation 01
Cloudfall is a defender-focused Operation that places learners inside a realistic cloud-native compromise of a fast-growing technology startup, centred on AWS identity abuse, workload compromise and data access.
Investigate a cloud-only attack across AWS. Trace federated identity abuse, IAM privilege escalation, compromised workloads, secrets access, persistence and customer data exfiltration.
Defensive operation 02
Modern Sandstorm is a defender-focused Operation that places learners inside a realistic enterprise compromise inspired by the tradecraft associated with Screening Serpens.
Investigate a targeted espionage campaign inspired by real-world APT tradecraft. Hunt across endpoints, network telemetry and forensic artefacts, trace lateral movement and exfiltration.
Cookie Preferences
We respect your right to privacy. You can choose not to allow some types of cookies. Your cookie preferences will apply across our website.
These are required cookies for the site to function.
These cookies help us improve the site by tracking which pages are most popular and how visitors move around the site.
These cookies are used to improve your advertisement experience across our website, we have disabled these by default
