One live range.
Attack the network or defend it, together, in real time.
Whether you bring a complete squad or drop into the queue, the range balances team sizes before launching the exercise.
Enter via solo queue or squad lobby
Minimum 3+ operators assembled per squad
Red (Attacker) and Blue (Defender) rosters locked
Red squad matched against live Blue SOC squad
Dedicated SDN-isolated network spun up
Every offensive technique paired directly with its defensive mirror.
Think like the adversary
Discover hidden attack surfaces and exploit chains across synthetic enterprise topology.
Anticipate offensive maneuvers and close telemetry visibility gaps before pivots occur.
See what defenders see
Observe the forensic footprints, Sysmon events, and network traps left by offensive commands.
Filter high-volume benign noise to isolate genuine adversary IOCs and living-off-the-land executions.
Practice under pressure
Execute coordinated objective timelines under active detection and host quarantine countermeasures.
Coordinate rapid triage, host containment, and Kerberos ticket revocation within seconds of alerting.
Work as one squad
Synchronize reconnaissance handoffs, payload delivery, and credential exploitation with teammates.
Align Tier 1 triage, threat hunters, and firewall operators for unified breach containment.
Deepen operational craft across offensive, defensive, infrastructure, and governance disciplines.
Red Team
Master offensive tactics, MITRE ATT&CK techniques, privilege escalation, and lateral movement in simulated enterprise domains.
- Network Reconnaissance
- Phishing Payloads
- Credential Harvesting
- SMB Lateral Pivoting
Blue Team
Analyze telemetry, triage high-fidelity alerts, investigate endpoint memory, and execute SDN micro-segmentation in real time.
- SIEM / EDR Analysis
- Indicator Extraction
- Host Isolation
- Incident Response Playbooks
Network Security
Design defense-in-depth boundary controls, configure mail gateway threat policies, and inspect TLS handshakes across DMZ perimeters.
- Proxmox SDN Policies
- Firewall Rule Tuning
- DNS Sinkholing
- VLAN Micro-segmentation
Governance, Risk & Compliance
Audit log verification, compliance mapping against synthetic standard baselines, and post-exercise executive briefing reports.
- Audit Trail Verification
- Risk Assessment
- Executive Reporting
- Evidence Collection
Experience live adversarial operations today
V1 Proxmox-based cyber range is live for invite-only operator sessions.