Overview
Explore
Labs
Services
Events
Partners
What's popular
The End-User Computing vs. Security Smackdown: Strategies to Emerge Victorious in the Digital Workspace
Tired of the endless tug-of-war between your end-user computing and security teams? Join WWT experts Ivan Wintersteiger, Director of EUC and AIOps (Observability), and Jordan Hildebrand, Global Cyber Practice Director, as they face-off in a discussion about strategies to move past the "us vs. them" mentality. You'll learn the frameworks, communication tactics and assessment methods that enable a harmonious balance between employee experience and security posture.
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
End User Computing Nerd vs the Great Firewall of China
Traveling to China for the holidays, I circumvented the Great Firewall of China to stay connected to the West. What worked and what didn't? While personal VPNs failed, using international roaming, VDI and an enterprise browser proved effective. This journey highlighted the challenges and solutions for maintaining internet access to the West in a highly restricted environment.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
Crowdstrike Falcon (EDR tool, end point protection and analysis)
Crowdstrike Logscale (History and logging)
CrowdStrike Cloud Security
CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 10 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
What's new
Partner POV | Reducing Your Attack Surface With Existing Endpoint Security Tools
The shift to hybrid data storage requires robust endpoint security and policy management to reduce risks and strengthen cybersecurity.
Partner POV | Strategic Leader in Real-World Endpoint Protection
Check Point Harmony Endpoint has been recognized as a Strategic Leader in AV-Comparatives' EPR Report and a Visionary in the 2024 Gartner Magic Quadrant for its exceptional endpoint protection, prevention, and innovation.
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 10 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
Cisco XDR Foundations
Cisco XDR lab to facilitate understanding around foundational XDR use for threat hunting, and providing know-how on deployment, and integration.
Cisco XDR Learning Path
Explore Cisco's XDR allowing it's users to correlate data across several vendors and vectors providing a wholistic view of ones environment. Throughout this learning path and corresponding lab you will learn the fundamentals of the Cisco XDR components and tools that allow SOC analysts visibility and context into advanced threats! We will take you through an introduction and operation of the XDR console as well as automation. Let's get started!
The End-User Computing vs. Security Smackdown: Strategies to Emerge Victorious in the Digital Workspace
Tired of the endless tug-of-war between your end-user computing and security teams? Join WWT experts Ivan Wintersteiger, Director of EUC and AIOps (Observability), and Jordan Hildebrand, Global Cyber Practice Director, as they face-off in a discussion about strategies to move past the "us vs. them" mentality. You'll learn the frameworks, communication tactics and assessment methods that enable a harmonious balance between employee experience and security posture.
End User Computing Nerd vs the Great Firewall of China
Traveling to China for the holidays, I circumvented the Great Firewall of China to stay connected to the West. What worked and what didn't? While personal VPNs failed, using international roaming, VDI and an enterprise browser proved effective. This journey highlighted the challenges and solutions for maintaining internet access to the West in a highly restricted environment.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
Crowdstrike Falcon (EDR tool, end point protection and analysis)
Crowdstrike Logscale (History and logging)
CrowdStrike Cloud Security
CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
Platforms vs. Point Solutions: Perspectives from the Executive, Consultant, and Engineer
This fourth article in the 5-part series compares platforms and point solutions through the perspectives of executives, consultants and engineers. It highlights their priorities, objections and ways to overcome challenges, offering insight into how different roles contribute to finding the right balance between simplicity, flexibility and long-term cybersecurity success.
The Case for Cybersecurity Platforms: Simplify, Integrate and Conquer
This third article in the 5-part series makes the case for cybersecurity platforms. It explores how platforms provide integrated, scalable protection, simplify management and deliver long-term cost efficiency. By unifying tools and reducing complexity, platforms offer businesses a streamlined, future-ready approach to cybersecurity without sacrificing quality or security efficacy.
In Defense of Point Solutions: Why Specialized Cybersecurity Tools Shine
This second article in the 5-part series highlights the advantages of point solutions. It explains how these specialized tools deliver best-in-class protection, adapt quickly to specific challenges and provide focused ROI. Despite potential complexity, point solutions excel at addressing targeted security needs, making them a smart choice for businesses seeking precision and flexibility.
Cisco XDR Sandbox
Cisco XDR Sandbox lab to facilitate experimentation for Cisco XDR use for threat hunting, integration, and viability for enterprises.
Cybersecurity Platforms vs. Point Solutions: Swiss Army Knives or Precision Tools?
This first article in a 5-part series explores the difference between cybersecurity platforms and point solutions. It explains how platforms offer unified, scalable protection while point solutions deliver specialized, best-in-class capabilities. Using simple analogies, it shows how these approaches tackle complex business challenges, setting the stage for deeper dives in upcoming articles.
Hands-On Lab Workshop: Cisco XDR Foundations
Join us for the Virtual Lab Workshop! During this exclusive session, the host will introduce the Cisco XDR Foundations. In this Live Lab event you will learn the basics about Cisco's XDR console and how to navigate through the many tools available to an analyst. Our Cisco XDR Foundations lab highlights the importance of having an XDR solution by showcasing the necessary tools an analyst will need to help your organization defend against cyber security threats.
The MITRE ATT&CK Framework: A Beginner's Guide
As part of the "Grizzled CyberVet: Practical Cybersecurity" collection, we examine the MITRE ATT&CK framework. We simplify and explain this framework used by attackers to compromise your digital ecosystem.
Understanding the Cybersecurity Kill Chain: A Simple Guide
As part of the "Grizzled CyberVet: Practical Cybersecurity" collection, we examine the cybersecurity kill chain. We simplify and explain this model used by attackers to compromise your digital ecosystem.
Partner POV | 5,000 Fake Microsoft Emails that Your Employees Could Fall For
To combat frequently impersonated emails by scammers, organizations should implement user awareness training, AI-powered email security, and keep software up-to-date.
Partner POV | Adaptive Email Security
Augment Proofpoint's core email security with a fully integrated layer of behavioral AI.
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
Elastic Endpoint Security Lab
Elastic Security provides a different approach to EDR by combing EDR and SIEM capabilities which leads to reduced mean time to detect and respond to threats. Elastic Security for endpoint prevents ransomware and malware, detects advanced threats and arms responders with vital investigative context, such as prioritized detections to help stop alert fatigue.