✓ You are authorized to test this machine. This is a live cybersecurity training environment. Scanning, enumeration, and exploitation are permitted and expected. All activity is logged and forwarded to student lab environments.
Odapeeka State University

Office of Information Technology

IT Portal · Systems Status · SOC Operations Dashboard
LAB SYSTEMS ONLINE | GCP us-east4-a | All activity logged to student lab
8,200
Enrolled Students
14
IT Staff
47
Active Subnets
3
Open Incidents
⚠ Active Incident — INC-2026-0312 Anomalous authentication activity detected across multiple endpoints in the registrar subnet (10.6.14.0/24). Investigation ongoing. Users experiencing login failures should contact the helpdesk at ext. 4400.
Service Status
ServiceHostStatusLast Check
Student Records (SIS)sis.osu.internalDegraded2 min ago
Active Directory (LDAP)dc01.osu.internalInvestigating4 min ago
Email (Exchange)mail.osu.internalOperational1 min ago
Financial Aid Portalfinaid.osu.internalOffline11 min ago
Research File Sharesfiles.osu.internalRestricted6 min ago
IT Helpdesk Portalhelpdesk.osu.internalOperational1 min ago
Student Lab Systems
🔍

Splunk SIEM

The primary analysis environment. Every scenario log — web, SSH, audit, and endpoint — is indexed here. Use the provided detection queries as a starting point, then build your own searches.

Launch Splunk →
🗂

Packet Capture Archive

Full network capture for the scenario — one PCAP per phase, plus a merged capture. Open them in Wireshark to cross-reference what the SIEM shows against the raw traffic on the wire.

Download PCAPs →
Training Scenario — The Odapeeka Breach

This environment reproduces a full intrusion against a university network hosted at odapeeka.cover6solutions.com — from initial reconnaissance through ransomware. Offensive students practice enumeration and access against the live target; defensive students reconstruct the same timeline in Splunk and the packet captures. The seven phases below map to MITRE ATT&CK.

PHASE 01
Reconnaissance
T1595.001
PHASE 02
Web Enumeration
T1046
PHASE 03
Initial Access
T1190 · T1078 · T1110.001
PHASE 04
C2 Beacon
T1071.001
PHASE 05
Internal Recon
T1059.004 · T1087 · T1082
PHASE 06
Exfiltration
T1560.001 · T1048.003
PHASE 07
Ransomware
T1486 · T1490 · T1491.001
Access Credentials

Your credentials are provided by your instructor before the session begins. Sign in to Splunk with your assigned fwl-studentXX@cover6.solutions account.

✓ Use the username and password issued to you for this session
✓ Do not share credentials with other students
✓ Contact your instructor if you experience login issues
Lab Resources