Blue Team Hands-On Labs
38 labs you deploy in one click and practice in real cloud environments.
Browse all hands-on labs >
Investigate API Access Logs with Azure Application Insights
View Lab >
Intro to Azure Enumeration
View Lab >
Scan and secure Azure Terraform with Checkov
View Lab >
Hunt and Remediate Azure Blob Exposure with Prowler
View Lab >
Give AI Agents Tools for Read-Only Access to Azure Environments
View Lab >
Give an AI agent access to operational runbooks in Azure
View Lab >
Require Microsoft Entra sign-in for an Azure App
View Lab >
Investigate Unauthorized Changes in the Azure Activity Log
View Lab >
Reduce your AWS attack surface with port scanning
View Lab >
Detect Suspicious Network Traffic with VPC Flow Logs
View Lab >
Protect CloudWatch Logs data with masking policies
View Lab >
Install and Configure the Amazon CloudWatch Unified Agent on EC2
View Lab >
Remediating Ghost Databases in the Cloud
View Lab >
Hunting for Ghost Databases in the Cloud
View Lab >
Automated Security Response with EventBridge and Lambda
View Lab >
Security Observability with CloudWatch Dashboards
View Lab >
Easily retrieve CloudWatch logs from the CLI with awslogs
View Lab >
Encrypting an unencrypted RDS database
View Lab >
Audit the Blast Radius of KMS Keys with Finders Keypers
View Lab >
Securing S3 Against Ransomware with YES3
View Lab >
Policy as Code with CloudFormation Guard
View Lab >
Create an IAM Role for Secure S3 Access
View Lab >
Automated S3 Remediation to Enforce Block Public Access
View Lab >
Query IAM Credentials Reports with Steampipe
View Lab >
Generate IAM Credentials Reports
View Lab >
Encrypting S3 data with SSE-C via the CLI
View Lab >
Check IAM policies against a deny list with IAM Access Analyzer
View Lab >
Check policies for new access before deployment with IAM Access Analyzer
View Lab >
Remediate Open SSH Security Groups with AWS Config and SSM
View Lab >
Encrypt and Decrypt Data with KMS and Data Keys
View Lab >
Find vulnerable Lambda Functions with Amazon Inspector
View Lab >
Amazon GuardDuty Sandbox
View Lab >
Deploy AWS WAF ACL for Application Load Balancer
View Lab >
Create a VPC with public and private subnets
View Lab >
Configure Security Groups (SGs) and NACLs
View Lab >
Encrypt Existing Unencrypted EBS Volumes and Snapshots
View Lab >
Query AWS accounts for S3 security issues using Steampipe
View Lab >
Find S3 Security Misconfigurations with Prowler
View Lab >