Cyber range environments built for purple team exercises. Each range has its own topology, hardening baseline, and detection stack. Scenarios live inside each range page.
Multi-segment Blackwood & Associates law firm forest with Elastic Defend + Suricata + Zeek watching. Attack surface designed to exercise every tier of credential and ACL abuse without hand-planted weaknesses.
Red team runs the full kill chain against the hardened baseline. Blue team gets per-phase telemetry, Sigma rules, and documented blind spots.
Isolated Active Directory Certificate Services environment with vulnerable templates pre-seeded. The only reproducible WS2025 lab with every ESC primitive attackable end-to-end under current patch level.
Research surface for the ADCS attack family (ESC, THEFT, PERSIST, DPERSIST, CBA extensions). Companion to the ongoing WS2025-state publishing push.
purpleranges.pro at the top (Enterprise Admins only), corp + dev trees under it, each tree with its own regional children. Every DC is WS2025 Core on hardened baseline. Pattern-2 tier-0 segmentation forces attackers off NTLM/direct-RPC paths to the root and onto trust-account chains + Kerberos-authenticated DRSUAPI.
Red team climbs the parent-child trust chain hop by hop to the forest root using trust-key-signed inter-realm TGTs and DC$ impersonation. Blue team gets per-phase telemetry across six domains + Sigma rules for cross-realm referral patterns.
Two independent forests with distinct krbtgt + enterprise admin boundaries, joined by an explicit trust. Blueprint for trust-ticket forging + inter-forest ACL abuse.
Not yet deployed. Blueprint drafted, scenario catalog pending.