Research session unavailable. No participant research session is associated with this browser. Use the participant access link supplied by the facilitator.

Participant Dashboard

MITRE ATT&CK PRE training

Work through the first two Enterprise ATT&CK tactic lanes: Reconnaissance and Resource Development. Controlled actions are available only where the trainer has an explicitly authorized lab exercise.

3 / 24

training lessons completed

12% complete

Scope reminder: Perform executable exercises only against the target and services explicitly authorized by the facilitator. Concept lessons do not require external target interaction.

TA0043 · ATT&CK Tactic

Reconnaissance

The adversary is trying to gather information they can use to plan future operations.

T1595 Completed

Check basic reachability

Send two ICMP echo requests to the configured lab target.

Open lesson

T1595 Completed

Survey a small set of common TCP ports

Perform a TCP connect scan against only the configured target and a small fixed set of common service ports.

Open lesson

T1595 Completed

Identify service versions

Use lightweight Nmap service detection on the same small fixed port set to gather software and version clues.

Open lesson

T1595 Available

Recognize wordlist-scanning behavior

Study how repeated requests for candidate hostnames, URLs, or resource names can appear in defensive telemetry.

Open lesson

T1592 Available

Gather Victim Host Information: recognize the technique

Study how Gather Victim Host Information supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1589 Available

Gather Victim Identity Information: recognize the technique

Study how Gather Victim Identity Information supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1590 Available

Gather Victim Network Information: recognize the technique

Study how Gather Victim Network Information supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1591 Available

Gather Victim Org Information: recognize the technique

Study how Gather Victim Org Information supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1598 Available

Phishing for Information: recognize the technique

Study how Phishing for Information supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1682 Available

Query Public AI Services: recognize the technique

Study how Query Public AI Services supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1597 Available

Search Closed Sources: recognize the technique

Study how Search Closed Sources supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1596 Available

Search Open Technical Databases: recognize the technique

Study how Search Open Technical Databases supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1593 Available

Search Open Websites/Domains: recognize the technique

Study how Search Open Websites/Domains supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1681 Available

Search Threat Vendor Data: recognize the technique

Study how Search Threat Vendor Data supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1594 Available

Search Victim-Owned Websites: recognize the technique

Study how Search Victim-Owned Websites supports the Reconnaissance phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

TA0042 · ATT&CK Tactic

Resource Development

The adversary is trying to establish resources they can use to support operations.

T1650 Available

Acquire Access: recognize the technique

Study how Acquire Access supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1583 Available

Acquire Infrastructure: recognize the technique

Study how Acquire Infrastructure supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1586 Available

Compromise Accounts: recognize the technique

Study how Compromise Accounts supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1584 Available

Compromise Infrastructure: recognize the technique

Study how Compromise Infrastructure supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1587 Available

Develop Capabilities: recognize the technique

Study how Develop Capabilities supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1585 Available

Establish Accounts: recognize the technique

Study how Establish Accounts supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1683 Available

Generate Content: recognize the technique

Study how Generate Content supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1588 Available

Obtain Capabilities: recognize the technique

Study how Obtain Capabilities supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

T1608 Available

Stage Capabilities: recognize the technique

Study how Stage Capabilities supports the Resource Development phase. This lesson uses a bounded defender-analysis exercise rather than executing the adversary behavior.

Open lesson

Final Assessment

DVWA Vulnerability Discovery Capstone

Perform an authorized assessment of the configured DVWA lab target. Identify and document security vulnerabilities you can validate within the stated scope. For each submitted finding, provide the vulnerability name, affected DVWA module, and a short evidence note describing the observation that supports the finding. Submit only when finished. This is a one-shot assessment: additional submissions are not permitted and correctness feedback is not shown during the assessment.

Open final assessment