Local CLI Defense Modules
Enterprise SOC Topology
Lightweight containerized Linux services designed for rapid local spin-up. Run targeted packet captures, inspect daemon configurations, and write strict iptables rules on single-host targets.
A full Active Directory forest coupled with Zeek sensor nodes and centralized syslog ingestion. Triage multi-stage credential dumping, lateral RPC movement, and domain compromise in an authentic perimeter architecture.
Cloud Telemetry Targets
Simulated multi-tenant AWS and Kubernetes clusters configured with leaky IAM policies, unauthenticated metadata endpoints, and automated GuardDuty alert verification.
Documented network topologies
Every lab release ships with deterministic infrastructure-as-code manifests and clear structural schematics. Inspect segmentation boundaries, capture points, and logging forwarders before launching containers.
Pull the verification manifests
Download verified Docker compose definitions, Vagrant files, and hardening checklists to deploy sandbox instances locally.