Documentation

Everything you need to run the range

Guides, references, and concepts for building scenarios, running engagements, and turning them into reports.

Create your workspace, launch your first lab, and connect through the browser.

The YAML that defines a lab — hosts, tooling, egress policy, and mandatory ATT&CK mapping.

Everything pre-installed on the attacker and defender nodes, and how to bring your own licenses.

How evidence is captured and how Red, Blue, and Purple reports are assembled and exported.

Default-deny egress, contained C2, tenant isolation, RBAC, and the audit trail.

Provision labs, stream ATT&CK events, and pull reports programmatically.

Full documentation is being published as the platform rolls out. Need something specific? Talk to the team.