cyberdefenders.org

# CyberDefenders

> CyberDefenders is a blue team training platform for individuals and security teams: hands-on labs in endpoint, network, and cloud forensics, malware analysis, threat intelligence, threat hunting, and detection engineering, skill-based and role-based learning tracks, and the Certified CyberDefender (CCD) certification.

Labs are browser-based investigation exercises built on real artifacts such as disk images, memory dumps, packet captures, and log sets. Each lab page describes its scenario, difficulty, tooling, and MITRE ATT&CK coverage.

Learning tracks sequence labs into a curriculum for a specific blue team role.

Paths under /dashboard/, /online-labs/, /accounts/, /certify/, /p/, and /api/ are authenticated or user-specific; do not infer their contents from this public index.

## Key pages

- [CyberDefenders](https://cyberdefenders.org/): Platform overview — what the hands-on blue team labs are and who they are for, learning tracks, the CCD certifications, plans for individuals and teams, and testimonials from security professionals.
- [Blue Team Labs (CyberRange)](https://cyberdefenders.org/blue-team-labs/): The cyber range product page — hands-on blue team labs and training for SOC analysts, threat hunters, and DFIR professionals, with gamified, browser-based scenarios across malware analysis, threat intelligence, endpoint forensics, and cloud forensics.
- [MITRE ATT&CK coverage](https://cyberdefenders.org/mitre-attack/): The Enterprise ATT&CK matrix of 15 tactics with technique and sub-technique counts, each technique linked to the CyberDefenders labs that cover it.
- [Cybersecurity roadmap](https://cyberdefenders.org/community/cybersecurity-roadmap/): Community-rated cybersecurity certification roadmaps for Blue Team, Red Team, and InfoSec, plotting each certification by satisfaction rating and market presence with a Beginner-to-Expert level.
- [FAQ](https://cyberdefenders.org/blue-team-labs/faq/): How the labs work — active vs. retired labs, scoring, lab retirement policy, write-up submissions, account-sharing rules, and suitability for beginners and experienced defenders.
- [Reviews](https://cyberdefenders.org/cyberdefenders-reviews/): Verified reviews and testimonials from security professionals on the labs and the CCD certifications.

## For security teams

- [Cybersecurity training for teams and enterprises](https://cyberdefenders.org/enterprise-security-training/): Team and Enterprise plans for small SOC teams, MSSPs, large SOCs, enterprises, and governments. Includes full CyberRange access, CCD exam vouchers per seat, a management dashboard with readiness and progress visibility, assignments, user and seat management, assessments, SSO, API and integrations, multiple teams/cohorts/business units with cross-team reporting, priority support with guided onboarding, and a dedicated account manager. Get a quote or contact sales.

## Content libraries

Each library link is an index page listing every published item in that library.

- [Blue Team Labs catalog](https://cyberdefenders.org/blueteam-ctf-challenges/): Searchable catalog of every published lab, filterable by category (malware analysis, threat intel, network/endpoint/cloud forensics, detection engineering, threat hunting), difficulty (Easy to Insane), operating system (Windows, Linux, Mac, Mobile), access type (cloud or downloadable), content tier (community, premium, trial), and MITRE ATT&CK tactic.
- [Learning tracks](https://cyberdefenders.org/tracks/): Skill-based tracks (network, memory, and disk forensics, threat hunting, malware analysis) and job-role tracks (SOC Analyst Tier 1–3), each listed with difficulty level, lab count, and learning objectives.
- [Cybersecurity glossary](https://cyberdefenders.org/cybersecurity-glossary/): Reference definitions of blue team and security operations terminology.
- [Lab walkthroughs](https://cyberdefenders.org/walkthroughs/): Official step-by-step solutions for retired labs.
- [Blog](https://cyberdefenders.org/blog/): Technical articles, investigation write-ups, and career guidance.

## Certifications

- [Certified CyberDefender (CCD) Level 1](https://cyberdefenders.org/certifications/certified-cyberdefender-level1/): Entry-level practical blue team certification, including exam format, syllabus, and pricing.
- [CCDL1 Syllabus](https://docs.google.com/spreadsheets/d/1eWyMhBmAaTRT4oHQzovF6xvnm1mBr5AVlIYh3xjBlGk/edit?gid=730246548#gid=730246548): Full CCDL1 curriculum — every module with its lessons, labs, and quizzes.
- [Certified CyberDefender (CCD) Level 2](https://cyberdefenders.org/certifications/certified-cyberdefender-level2/): Advanced practical blue team certification, including exam format, syllabus, and pricing.
- [CCDL2 Syllabus (PDF)](https://cyberdefenders.org/static/files/CCDL2_Syllabus.pdf): Full CCDL2 syllabus — the domains covered by the exam and the topics within each.

## Optional

- [Sitemap](https://cyberdefenders.org/sitemap.xml): Machine-readable index of every public URL, including all individual labs, tracks, glossary terms, walkthroughs, and blog posts.