The 16-week curriculum
Three 2-hour sessions a week plus an optional lab. Every week carries all seven required lab columns: physical, Docker, AR/VR, equipment, evidence, safety and competency.
A fictional regional manufacturer, Carrollton Precision Works, is standing up its first security team. You are the newest hire and must set up the training lab safely before anyone touches a tool.
A help-desk ticket says 'the internet is down' for one floor. Trace the packet's journey layer by layer to find where it breaks.
Guest Wi-Fi and the finance servers share one flat network. Segment it before the auditor arrives Friday.
A new switch arrived with default credentials and three-year-old firmware. Baseline it before it goes in the rack.
Finance received an 'urgent CEO wire request' and a stranger followed staff through the badge door. Design the defense for a fictional company.
Before an authorized assessment, map what a fictional company unknowingly publishes about itself — and separate fact from rumor.
The fictional client wants a web-app assessment next week. Nothing happens until scope and signatures are in place.
Midterm engagement: assess the provided lab target end to end and prove every claim with evidence.
Red team has a two-hour window against the range. Blue must detect, respond and map every action to ATT&CK.
A vendor library in the fictional company's customer portal has a critical CVE. Find it, fix it and prove it's fixed.
Twelve retired laptops and an unknown device in the server room. Decommission safely and find the rogue.
The board asks: 'Are we NIST or ISO?' Build the crosswalk that shows it's the same control in different words.
Odd Modbus writes are hitting the simulated water-treatment PLC. Investigate without stopping the process.
The fictional company wants smart sensors and an AI chatbot by next quarter. Assess the risk before launch.
Ransomware notes appeared on two workstations at 6 a.m. Contain it, preserve evidence, and brief the CEO by 9.
Full-scale exercise against Carrollton Precision Works' IT and OT range. Red attacks, blue defends, purple maps, governance evaluates — then brief the board.