Overview
Explore
Labs
Services
Events
Partners
What's popular
ATC+
Tanium Proving Ground Lab
Tanium 7.6 Proving Ground Lab
ATC+
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
ATC+
Tanium Integrated Lab
Tanium Integrated Lab
Experience the transformative power of Tanium's Autonomous Endpoint Management at WWT's Advanced Technology Center. This integrated lab showcases real-time automation, enhancing IT operations and cybersecurity. Discover how Tanium, ServiceNow, and Microsoft Security solutions synergize to accelerate threat detection and response, shifting cybersecurity from reactive to proactive for robust resilience.
ATC+
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
What's new
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
While the lab environment remains open for 8 hours, the game is designed to be completed within a 6-hour window.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
ATC+
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 11 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
IGEL, You Have My Attention
IGEL Dual Boot, paired with Omnissa, revolutionizes ransomware recovery by enabling swift reboot into a clean IGEL OS, ensuring operational continuity. This innovative approach transforms endpoints from liabilities into recovery assets, minimizing downtime and enhancing resilience against cyberattacks. Embrace this breakthrough for rapid, effective recovery and sustained productivity.
Check Point Technologies, Architecture, & Deployment Models
This learning path delivers a structured exploration of Check Point's security design principles and platform deployment models across enterprise network environments. Through guided articles, videos, & a hands-on-lab, participants will develop meaningful insightst around platform selection, deployment placement, and policy design for the data center, Internet edge, campus, and branch.
Checkpoint SD-WAN Lab
The Check Point SD-WAN lab is a hands-on environment designed to teach how Quantum SD-WAN is configiured over an existing environment that deploys Check Point security gateways . You will explore a distributed topology that includes branch sites with multiple ISP connections, centralized management, and simulated internet and MPLS transport, then configure SD-WAN objects tunnels & monitor various parameters. The lab also emphasizes operational workflows, including policy deployment, validation, & monitoring.
Partner POV | Keeping Hackers off Every Edge with Fortinet
In a rapidly evolving digital landscape, traditional firewalls falter against sophisticated cyber threats. Fortinet's AI-powered Next-Generation Firewalls (NGFWs) offer a unified security solution, integrating advanced threat detection and seamless scalability. This approach ensures robust protection, simplified management and enhanced performance across hybrid IT infrastructures, safeguarding data and applications everywhere.
Autonomous Endpoint Management: Next-Gen Endpoint Visibility Fueling SecOps and IT Ops with AI
Modern enterprises face challenges in managing complex IT environments. Tanium's Autonomous Endpoint Management (AEM) platform offers a unified solution, combining real-time visibility with AI-enhanced decision-making. By breaking down silos and automating processes, AEM transforms endpoint management, enabling proactive risk mitigation and reducing incident response times, ultimately reshaping IT and security operations.
ATC+
Achieve OWASP Compliance Through BIG-IP AWAF
Systems are at higher risk without a concerted, repeatable application security configuration process. In this lab, you will learn how to build a declarative AWAF policy and achieve OWASP Top Ten (2021) compliance with the BIG-IP OWASP Compliance Dashboard. A complete CI/CD pipeline is used to deploy our AWAF policy to the BIG-IP system using Application Services 3 Extension (AS3) and Ansible.
Elastic Endpoint Security Lab
Elastic Security provides a different approach to EDR by combing EDR and SIEM capabilities which leads to reduced mean time to detect and respond to threats. Elastic Security for endpoint prevents ransomware and malware, detects advanced threats and arms responders with vital investigative context, such as prioritized detections to help stop alert fatigue.
ATC+
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
ATC+
Service Chain Management Process With F5 SSLO
The intended goal of this lab is to enable security administrators to configure and test F5 SSL Orchestrator and showcase how to dynamically orchestrate security infrastructure.
Partner POV | Trellix Email and Collaboration Security Emerges as a Market Leader
In an era of AI-driven cyber threats, Trellix offers a comprehensive email and collaboration security solution. With elite detection accuracy, scalable analysis, and integrated human risk management, Trellix empowers organizations to stay ahead of evolving threats.
Partner POV | As security continues to evolve, has your mobile strategy?
In a world of escalating mobile threats, Omnissa's Workspace ONE UEM and Mobile Threat Defense offer a robust solution. While UEM manages devices, Mobile Threat Defense detects and mitigates sophisticated cyber threats. Together, they safeguard corporate and BYOD devices, ensuring secure access and reducing vulnerabilities in an ever-evolving digital landscape.
Partner POV | Eradicate Deeply Embedded Threats with AI-powered Endpoint Forensics
Organizations paying ransoms often face repeat attacks due to inadequate root-cause analysis and security measures. Trellix EDRF, integrating AI and forensic capabilities, transforms incident response by providing real-time, context-rich insights. This proactive approach enables faster threat containment, comprehensive breach understanding, and continuous security improvement, empowering even junior analysts.
Beyond Identity Foundations Lab
This lab features Beyond Identity which is an authentication solution that uses device-bound credentials for zero-friction passwordless authentication. Beyond Identity is a cloud-native platform that uses Authenticators downloaded on endpoints which registers a users credentials and collects signals on the endpoint to capture device security posture for authentication.
Partner POV | The Hidden Third Party Risk in Airport Baggage Handling Systems
The aviation industry's digital evolution exposes vulnerabilities, as seen in a baggage handling system breach via third-party access. This article explores the risks of interconnected cyber-physical systems and offers strategies for securing critical infrastructure, emphasizing the need for continuous trust verification and dynamic security measures to ensure operational resilience.
ATC+
Zscaler Internet Access, CrowdStrike, and Okta Integration Lab
This lab exists to provide hands-on experience with the integration between ZIA, CrowdStrike Falcon, and Okta through relevant use cases. First, this lab can be used to see how the integration between CrowdStrike Falcon and ZIA can ensure administrators have end-to-end insight into the threat landscape to minimize attack surface and deliver rapid threat detection and response. On top of this, the lab allows users to see how Okta can integrate with both CrowdStrike and Zscaler to strengthen a company's Zero Trust profile, enhance threat detection during authentication and monitor the intersection of security and access management.
Partner POV | Proofpoint's Next Human Factor Report Uncovers Insights: Phishing & URL-Based Threats
Phishing tactics are evolving, with attackers increasingly using URLs over attachments, expanding into mobile and hybrid vectors like smishing and QR code phishing. Despite security measures, phishing exploits human instincts, posing significant risks. Organizations must enhance defenses against these diversified threats to prevent data breaches and large-scale fraud.
ATC+
SentinelOne Endpoint & AI SIEM Foundations Lab
Welcome to the SentinelOne Endpoint & AI SIEM Foundations lab provided by the WWT ATC! This lab provides you with a sample environment where you can gain hands-on experience with the SentinelOne solution.
SentinelOne XDR
In this learning path you will gain a fundamental understanding of the SentinelOne XDR solution by exploring topics such as the architecture on which SentinelOne XDR is built and the configuration of agent policies. You will also learn about topics such as the endpoint response actions and XDR response actions that SentinelOne can leverage to stop a threat in its tracks.