Beginner Lab: 1

Welcome to the Interactive Security Operations Terminal. This lab will introduce you to essential network security concepts and tools. You will be able to run commands related to network security and forensics directly in the terminal below.

Note: You can enable Quiz Mode to test your knowledge interactively. When in full-screen mode, if quiz mode is enabled, the terminal and quiz will be displayed side by side.

To get started, type help in the terminal for a list of available commands.

What You'll Learn

This lab is designed to provide a foundational understanding of network security operations. By the end of this lab, you will have hands-on experience with the following topics:

1. Network Security Basics

Learn the core principles of network security, including common attack vectors, essential security protocols, and best practices for safeguarding your network infrastructure.

• Focus: Understanding network security concepts, identifying vulnerabilities, and implementing security controls.
• Tools: Wireshark, Nmap, Metasploit, Snort, and more.
• Skills: Network monitoring, threat detection, incident response, and security policy enforcement.

2. Command-Line Interface Proficiency

Gain confidence in using the terminal to perform network analysis, manage files, and configure security settings. This includes learning basic commands and their applications in security operations.

• Focus: Navigating the file system, managing files and directories, and executing network commands.
• Tools: Terminal commands like ls, cd, ping, traceroute, and more.
• Skills: Command-line navigation, file management, and executing network tools via the terminal.

3. Hands-on Experience with Network Tools

Use powerful network tools to capture and analyze traffic, scan for vulnerabilities, and perform security assessments.

• Focus: Capturing network traffic, performing scans, and analyzing results.
• Tools: Wireshark for packet analysis, Nmap for network scanning, and Metasploit for exploiting vulnerabilities.
• Skills: Conducting network assessments, analyzing captured traffic, and interpreting scan results.

4. Interactive Quiz Mode

Test your knowledge with interactive quiz questions based on the commands and topics covered in the lab. Enable Quiz Mode to challenge yourself and reinforce your learning.

• Focus: Reinforcing command-line skills and network security concepts.
• Tools: Integrated terminal quiz with real-time feedback.
• Skills: Applying what you've learned in practical scenarios and identifying gaps in knowledge.

How to Use the Terminal

1. Explore the Commands:

   • Type help to view a list of all available commands.
   • Use basic commands like ls, cd, and pwd to navigate the file system.

2. Analyze Network Traffic:

   • Use commands like tcpdump and tshark to capture and analyze live network traffic.
   • Try commands like ping and traceroute to test network connectivity.

3. Fingerprinting and Detection:

   • Run commands like ja3, ja4, and jarm to display mock fingerprints and understand their usage in detecting anomalous traffic.

4. Interactive Quiz:

   • Enable Quiz Mode using the checkbox in the control panel.
   • Follow the instructions and complete the quiz to test your command-line skills and knowledge of network security.

5. Full-Screen Mode:

   • Click Full Screen for an immersive experience. This mode displays the terminal and quiz side by side.

Additional Resources

If you are new to network security or need a refresher on specific topics, the following resources can help:

• Wireshark User Guide
• Nmap Documentation
• Metasploit Unleashed
• Snort User Manual

By mastering these tools and concepts, you'll be well-prepared to tackle more advanced security challenges. Good luck, and enjoy the lab!