Overview
Explore
Labs
Services
Events
Partners
What's popular
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
We invite you to complete the SentinelOne XDR Learning Path and Initiation, our demo CTF, to be best prepared! You can find both of these under the related content at the bottom of this page. After 12/17, they can be launched from the "Resources" tab on this page.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
CrowdStrike Proving Ground Lab
WWT's ATC CrowdStrike Proving Ground Lab exists to showcase the CrowdStrike Falcon platform's web UI and ability to alert on, and prevent, breaches using cloud data and machine learning.
Elastic Endpoint Security Lab
Elastic Security provides a different approach to EDR by combing EDR and SIEM capabilities which leads to reduced mean time to detect and respond to threats. Elastic Security for endpoint prevents ransomware and malware, detects advanced threats and arms responders with vital investigative context, such as prioritized detections to help stop alert fatigue.
End User Computing Nerd vs the Great Firewall of China
Traveling to China for the holidays, I circumvented the Great Firewall of China to stay connected to the West. What worked and what didn't? While personal VPNs failed, using international roaming, VDI and an enterprise browser proved effective. This journey highlighted the challenges and solutions for maintaining internet access to the West in a highly restricted environment.
What's new
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
CrowdStrike CTF: Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
We invite you to complete the SentinelOne XDR Learning Path and Initiation, our demo CTF, to be best prepared! You can find both of these under the related content at the bottom of this page. After 12/17, they can be launched from the "Resources" tab on this page.
Partner POV | Keeping Hackers off Every Edge with Fortinet
In a rapidly evolving digital landscape, traditional firewalls falter against sophisticated cyber threats. Fortinet's AI-powered Next-Generation Firewalls (NGFWs) offer a unified security solution, integrating advanced threat detection and seamless scalability. This approach ensures robust protection, simplified management and enhanced performance across hybrid IT infrastructures, safeguarding data and applications everywhere.
Achieve OWASP Compliance Through BIG-IP AWAF
Systems are at higher risk without a concerted, repeatable application security configuration process. In this lab, you will learn how to build a declarative AWAF policy and achieve OWASP Top Ten (2021) compliance with the BIG-IP OWASP Compliance Dashboard. A complete CI/CD pipeline is used to deploy our AWAF policy to the BIG-IP system using Application Services 3 Extension (AS3) and Ansible.
Elastic Endpoint Security Lab
Elastic Security provides a different approach to EDR by combing EDR and SIEM capabilities which leads to reduced mean time to detect and respond to threats. Elastic Security for endpoint prevents ransomware and malware, detects advanced threats and arms responders with vital investigative context, such as prioritized detections to help stop alert fatigue.
CrowdStrike and Zscaler Private Access Integrated Lab
WWT's ATC CrowdStrike and Zscaler Integrated lab exists to showcase the integration between CrowdStrike's Falcon Platform, Zscaler Private Access and Zscaler Client Connector through relevant use cases.
Service Chain Management Process With F5 SSLO
The intended goal of this lab is to enable security administrators to configure and test F5 SSL Orchestrator and showcase how to dynamically orchestrate security infrastructure.
Partner POV | Trellix Email and Collaboration Security Emerges as a Market Leader
In an era of AI-driven cyber threats, Trellix offers a comprehensive email and collaboration security solution. With elite detection accuracy, scalable analysis, and integrated human risk management, Trellix empowers organizations to stay ahead of evolving threats.
Partner POV | As security continues to evolve, has your mobile strategy?
In a world of escalating mobile threats, Omnissa's Workspace ONE UEM and Mobile Threat Defense offer a robust solution. While UEM manages devices, Mobile Threat Defense detects and mitigates sophisticated cyber threats. Together, they safeguard corporate and BYOD devices, ensuring secure access and reducing vulnerabilities in an ever-evolving digital landscape.
Partner POV | Eradicate Deeply Embedded Threats with AI-powered Endpoint Forensics
Organizations paying ransoms often face repeat attacks due to inadequate root-cause analysis and security measures. Trellix EDRF, integrating AI and forensic capabilities, transforms incident response by providing real-time, context-rich insights. This proactive approach enables faster threat containment, comprehensive breach understanding, and continuous security improvement, empowering even junior analysts.
Beyond Identity Foundations Lab
This lab features Beyond Identity which is an authentication solution that uses device-bound credentials for zero-friction passwordless authentication. Beyond Identity is a cloud-native platform that uses Authenticators downloaded on endpoints which registers a users credentials and collects signals on the endpoint to capture device security posture for authentication.
Partner POV | The Hidden Third Party Risk in Airport Baggage Handling Systems
The aviation industry's digital evolution exposes vulnerabilities, as seen in a baggage handling system breach via third-party access. This article explores the risks of interconnected cyber-physical systems and offers strategies for securing critical infrastructure, emphasizing the need for continuous trust verification and dynamic security measures to ensure operational resilience.
Zscaler Internet Access, CrowdStrike, and Okta Integration Lab
This lab exists to provide hands-on experience with the integration between ZIA, CrowdStrike Falcon, and Okta through relevant use cases. First, this lab can be used to see how the integration between CrowdStrike Falcon and ZIA can ensure administrators have end-to-end insight into the threat landscape to minimize attack surface and deliver rapid threat detection and response. On top of this, the lab allows users to see how Okta can integrate with both CrowdStrike and Zscaler to strengthen a company's Zero Trust profile, enhance threat detection during authentication and monitor the intersection of security and access management.
Partner POV | Proofpoint's Next Human Factor Report Uncovers Insights: Phishing & URL-Based Threats
Phishing tactics are evolving, with attackers increasingly using URLs over attachments, expanding into mobile and hybrid vectors like smishing and QR code phishing. Despite security measures, phishing exploits human instincts, posing significant risks. Organizations must enhance defenses against these diversified threats to prevent data breaches and large-scale fraud.
SentinelOne Endpoint & AI SIEM Foundations Lab
Welcome to the SentinelOne Endpoint & AI SIEM Foundations lab provided by the WWT ATC! This lab provides you with a sample environment where you can gain hands-on experience with the SentinelOne solution.
SentinelOne XDR
In this learning path you will gain a fundamental understanding of the SentinelOne XDR solution by exploring topics such as the architecture on which SentinelOne XDR is built and the configuration of agent policies. You will also learn about topics such as the endpoint response actions and XDR response actions that SentinelOne can leverage to stop a threat in its tracks.
CrowdStrike CTF : Falcon
CrowdStrike delivers a unified platform approach to modern security so you can protect and build your future. This game incorporates several new features of CrowdStrike, offering a unique opportunity to test your skills against the latest in cybersecurity technology.
Tools utilized within the game:
🔷Crowdstrike Falcon (EDR tool, end point protection and analysis)
🔷Crowdstrike Logscale (History and logging)
🔷CrowdStrike Cloud Security
🔷CrowdStrike Identity Threat Protection
This is a mixed capture the flag style event that will require you and your team to zero in on malicious actors inside of a network, identify vulnerable or outdated services, and brace yourself for a real-time series of cyber attacks. Points will be awarded for finding those exploits, remediating them to the best of your ability and defending Iron Guardian's network.
IF THIS EVENT IS FULL, PLEASE HEAD OVER TO THE OCTOBER EVENT - https://www.wwt.com/event/68b0c1cca140c6b365be5894
Black Hat Exclusive: SentinelOne's Steve Regini on the Future of Endpoint Security
Matt Berry, Global Field CTO of Cybersecurity at WWT, is joined by Steve Regini, SVP of Global Solutions Engineering at SentinelOne, to discuss the future of Endpoint Security at Black Hat USA 2025.
Partner POV | Fortinet and CrowdStrike Joint Solution
Delivering AI-powered protection, adaptive zero-trust access, and accelerated threat detection and response across your entire digital infrastructure