A cyber range is a self-contained production-shape environment where attacks run end-to-end on real infrastructure. This platform publishes the outcome of each range: the complete attack path, EDR alert telemetry, Sigma rules, and documented blind spots.
Hardened Active Directory and hybrid identity environments, built for research, new tools, and modern tradecraft. End-to-end purple team scenarios run against them.
Each scenario is a full kill chain executed on the range: red team phases, EDR alert aggregates, Sigma rules, and documented blind spots. Published as one long-form report with downloadable raw telemetry.
The scenario reports, Sigma rules, BOF collection, custom shellcode loaders, and UDRL are on GitHub. The infrastructure that produces them stays private.
End-to-end purple-team scenario against a hardened mid-sized legal firm. After OSINT on the firm's partners and paralegals, a single AI-drafted spearphish delivers a Module Stomping loader onto a paralegal's workstation.
If something below doesn't answer what you're looking for, the email in the footer gets read.