01 Attack Lab
Walk through a real attack, live.
This section will let you launch my Active Directory Attack Lab directly from the browser and follow the exact attack chain I ran, including Kerberoasting, ACL/DACL abuse, Pass-the-Hash, Pass-the-Ticket, lateral movement, and forest trust exploitation. You'll also get a shortcut into a read-only Splunk view of the logs it generated, plus my written analysis alongside it. Not a recording, not a slideshow: the real environment and the real telemetry.
- Launch a scoped, disposable copy of the AD Attack Lab on demand
- Desktop shortcut into Splunk showing the attack's log trail
- My write-up displayed side-by-side with the environment
02 Write-Ups
Retired labs: read-only evidence and analysis from environments I've already torn down. Each one gets its own page — the environment is gone, but the real telemetry it generated and my write-up stay up permanently.
No write-ups yet. When the current lab retires and the next one goes live, its write-up and captured telemetry will land here.