Draft:Introduction (General)
This draft is ready for review. If you're the author, click below to notify a reviewer. A reviewer will check it for structure, sourcing, and accuracy. You may continue editing while you wait.Request reviewApprove draftReject draft
cypat.guide is a non-profit organisation to help develop blue-team skills through articles and practice images developed by the community. This website includes docs for Windows, Linux, and Cisco.
Vulnerability Categories
Each virtual machine (VM) contains vulnerabilities grouped into categories. This guide focuses on these categories:
- Account Policies
Password and lockout policies.
- Application Security Settings
Critical services, required settings, and permissions.
- Application Updates
Update status and automatic update configurations.
- Defensive Countermeasures
Firewalls, antivirus software, encryption, etc.
- Forensic Questions
Scenario-based questions assessing investigative skills.
- Local Policies
Audit policies, user rights assignments, and security options (e.g., network security, privilege elevation).
- Operating System Updates
Windows updates, service packs, and automatic update settings.
- Policy Violation: Malware
Includes backdoors, remote admin tools, keyloggers, sniffers, etc.
- Policy Violation: Prohibited Files
Unauthorized software archives, confidential files, etc.
- Policy Violation: Unwanted Software
Games, scareware, adware, PUPs, hacking tools, etc.
- Service Auditing
Enable/disable services.
- Uncategorized OS Settings
Remote access, file sharing, screen locking, group policy settings, OS permissions, etc.
- User Auditing
Authorized users, groups, and user-specific settings.
Practice images are available for preparation here.