Overview
Explore
Labs
Services
Events
Partners
What's popular
CrowdStrike CTF: Falcon
REGISTRATION FOR THIS EVENT IS CLOSED. IF YOU WOULD LIKE TO PARTICIPATE REACH OUT TO DANIEL.HARTNAGEL@WWT.COM
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
ATC+
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
ATC+
Tanium Integrated Lab
Tanium Integrated Lab
Experience the transformative power of Tanium's Autonomous Endpoint Management at WWT's Advanced Technology Center. This integrated lab showcases real-time automation, enhancing IT operations and cybersecurity. Discover how Tanium, ServiceNow, and Microsoft Security solutions synergize to accelerate threat detection and response, shifting cybersecurity from reactive to proactive for robust resilience.
SentinelOne CTF: Siren Song
REGISTRATION IS CLOSED. PLEASE REACH OUT TO Daniel.Hartnagel@wwt.com IF YOU ARE INTERESTED IN PLAYING!
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
While the lab environment remains open for 8 hours, the game is designed to be completed within a 6-hour window.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
ATC+
Zscaler Internet Access, CrowdStrike, and Okta Integration Lab
This lab exists to provide hands-on experience with the integration between ZIA, CrowdStrike Falcon, and Okta through relevant use cases. First, this lab can be used to see how the integration between CrowdStrike Falcon and ZIA can ensure administrators have end-to-end insight into the threat landscape to minimize attack surface and deliver rapid threat detection and response. On top of this, the lab allows users to see how Okta can integrate with both CrowdStrike and Zscaler to strengthen a company's Zero Trust profile, enhance threat detection during authentication and monitor the intersection of security and access management.
What's new
CrowdStrike CTF: Falcon
REGISTRATION FOR THIS EVENT IS CLOSED. IF YOU WOULD LIKE TO PARTICIPATE REACH OUT TO DANIEL.HARTNAGEL@WWT.COM
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
ATC+
CrowdStrike and ExtraHop Integrated Lab
WWT's ATC ExtraHop & Crowdstrike Integration Proving Ground Lab exists to provide a unified solution built around relevant use cases. It will showcase ExtraHop and CrowdStrike's integration to stop breaches before they can cause damage.
Partner POV | Attackers Go Where Agents Can't. Rubrik and CrowdStrike Follow Them.
In a landscape where adversaries exploit non-agent systems, Rubrik and CrowdStrike's integration offers a proactive defense. By applying CrowdStrike Threat Intelligence to backup snapshots, organizations gain comprehensive threat visibility across critical infrastructures, ensuring robust protection and clean recovery without additional resources. This collaboration extends threat intelligence to previously vulnerable environments.
Partner POV | Fortinet Expands FortiEndpoint with New Capabilities for the AI Era
New innovations delivered through one agent, one console and one license help security teams safely enable AI adoption, strengthen data security, improve risk visibility and simplify operations
ATC+
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
FortiSIEM + FortiEDR: Detection and Response in Minutes
Follow a SOC analyst as they trace a live intrusion from first alert to full root cause. FortiSIEM correlates the signals to show where to look; FortiEDR delivers the forensic detail to reveal what happened and how to respond, taking an analyst from detection to root cause to response in minutes.
SentinelOne CTF: Siren Song
REGISTRATION IS CLOSED. PLEASE REACH OUT TO Daniel.Hartnagel@wwt.com IF YOU ARE INTERESTED IN PLAYING!
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
While the lab environment remains open for 8 hours, the game is designed to be completed within a 6-hour window.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
Cisco Secure AI Factory with NVIDIA: Observability
This learning path delivers a structured exploration of network observability principles and monitoring architecture across enterprise environments. Through guided articles, videos, and hands-on labs, participants will develop meaningful insight around telemetry strategy, observability tool placement, and data pipeline design for the data center, cloud edge, campus, and distributed application layer.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
CrowdStrike CTF: Falcon
THIS EVENT IS FULL, THERE IS ANOTHER EVENT ON 5/14 https://www.wwt.com/event/69b09c1691f525212cac0e34
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
IGEL, You Have My Attention
IGEL Dual Boot, paired with Omnissa, revolutionizes ransomware recovery by enabling swift reboot into a clean IGEL OS, ensuring operational continuity. This innovative approach transforms endpoints from liabilities into recovery assets, minimizing downtime and enhancing resilience against cyberattacks. Embrace this breakthrough for rapid, effective recovery and sustained productivity.
Check Point Technologies, Architecture, & Deployment Models
This learning path delivers a structured exploration of Check Point's security design principles and platform deployment models across enterprise network environments. Through guided articles, videos, & a hands-on-lab, participants will develop meaningful insightst around platform selection, deployment placement, and policy design for the data center, Internet edge, campus, and branch.
Check Point SD-WAN Lab
The Check Point SD-WAN lab is a hands-on environment designed to teach how Quantum SD-WAN is configiured over an existing environment that deploys Check Point security gateways . You will explore a distributed topology that includes branch sites with multiple ISP connections, centralized management, and simulated internet and MPLS transport, then configure SD-WAN objects tunnels & monitor various parameters. The lab also emphasizes operational workflows, including policy deployment, validation, & monitoring.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
CrowdStrike CTF: Falcon
THIS EVENT IS FULL. IF YOU ARE INTERESTED IN THIS EVENT, WE HAVE ANOTHER ON 2/12/26 https://www.wwt.com/event/696159765f962d6b5d41c68c .
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
We invite you to complete the SentinelOne XDR Learning Path and Initiation, our demo CTF, to be best prepared! You can find both of these under the related content at the bottom of this page. After 12/17, they can be launched from the "Resources" tab on this page.
Partner POV | Keeping Hackers off Every Edge with Fortinet
In a rapidly evolving digital landscape, traditional firewalls falter against sophisticated cyber threats. Fortinet's AI-powered Next-Generation Firewalls (NGFWs) offer a unified security solution, integrating advanced threat detection and seamless scalability. This approach ensures robust protection, simplified management and enhanced performance across hybrid IT infrastructures, safeguarding data and applications everywhere.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
Autonomous Endpoint Management: Next-Gen Endpoint Visibility Fueling SecOps and IT Ops with AI
Modern enterprises face challenges in managing complex IT environments. Tanium's Autonomous Endpoint Management (AEM) platform offers a unified solution, combining real-time visibility with AI-enhanced decision-making. By breaking down silos and automating processes, AEM transforms endpoint management, enabling proactive risk mitigation and reducing incident response times, ultimately reshaping IT and security operations.