Blue Team Labs

Put your knowledge into practice with gamified cyber security challenges.

Join for Free

Lockdown

Network Forensics

easy

Reconstruct a multi-stage intrusion by analyzing network traffic, memory, and malware artifacts using Wireshark, Volatility, and VirusTotal, mapping findings to MITRE ATT&CK.

Yara Wizards

PREMIUM

Detection Engineering

medium

Analyze malware behavior and develop YARA rules for proactive detection by identifying packing methods, entropy levels, and execution patterns.

Gh0stNet Intrusion

PREMIUM

Threat Hunting, Endpoint Forensics

hard

Synthesize forensic evidence from disk images, PCAP, and Splunk logs to reconstruct a Gh0stNet intrusion, identifying C2, persistence, and data exfiltration via DNS tunneling.

BlackSuit Ransomware

PREMIUM

Malware Analysis

hard

Reconstruct BlackSuit ransomware's attack lifecycle by analyzing PE artifacts, encrypted payloads, API calls, and network communication using Ghidra, x64dbg, and CFF Explorer.