Skip to content

Welcome to the SEC565 Electronic Workbook

Copyright ©2023, SANS Institute. All rights reserved to SANS Institute. This workbook is considered Courseware as defined by the SANS Courseware License Agreement found at https://www.sans.org/mlp/courseware-licensing-agreement/ and is subject to all terms and conditions of the agreement. Use of this workbook constitutes agreement with these conditions.

E-Workbook Overview

This electronic workbook contains all lab materials for SANS SEC565 Red Team Operations and Adversary Emulation. Each lab is designed to address a hands-on application of concepts covered in the corresponding courseware and help students achieve the learning objectives that the course authors have established.

SEC565 coin

Some of the key features of this electronic workbook include the following:

  • Convenient copy-to-clipboard buttons at the right side of code blocks
  • Inline drop-down solutions, command lines, and results for easy validation and reference
  • Integrated keyword searching across the entire site at the top of each page
  • Full-workbook navigation is displayed on the left and per-page navigation is on the right of each page
  • Many images can be clicked to enlarge when necessary

Updating the E-Workbook

Tip

We recommend performing the update process at the start of the first day of class to ensure you have the latest content.

The electronic workbook site is stored locally in the VM so that it is always available. However, course authors may update the source content with minor fixes, such as correcting typos or clarifying explanations, or add new content such as updated bonus labs. You can pull down any available updates into the VM by running the following command in a bash window:

workbook-update

The script will indicate whether there were available updates. If so, be sure to refresh any pages you are currently viewing (or restart the browser) to make sure you are seeing the latest content.

Using the E-Workbook

The SEC565 electronic workbook should be the home page for the browsers inside all virtual machines where it is maintained. Simply open a browser or click the home page button to immediately access it in the VMs.

You can also access the workbook from your host system by connecting to the IP address of your VM. Run ip a in Linux or in the Ubuntu bash shell in Windows to get the IP address of your VM. Next, in a browser on your host machine, connect to the URL using that IP address (i.e. http://<%VM-IP-ADDRESS%>). You should see this main page appear on your host. This method could be especially helpful when using multiple screens.

We hope you enjoy the SEC565 class and workbook! To get the most out of your lab time in class, we recommend following the guidance in How to Approach the Labs.