Student Lab & AI Coaching Onboarding
Everything you need to configure your environment, access OpenCyberLab pre-work, download backup VMs, register for SkillBit CTF, connect to hosted remote labs, and study with AI Notebooks before DEF CON Training.
1. OpenCyberLab Pre-Work Path
All OpenCyberLab modules below are optional practice labs. Complete them at your convenience to build confidence in Linux, PCAP inspection, network scanning, log enrichment, and security concepts.
Core Pre-Work Modules:
1. Introduction to LinuxCore
Purpose: Build comfort with basic Linux commands, navigating directories, reading files, and using the terminal.
Why it matters: Students will work with logs, scripts, containers, files, and command-line tools during the bootcamp.
2. Packet Analysis with WiresharkCore
Purpose: Practice opening PCAP files, reviewing network traffic, identifying conversations, and analyzing protocols such as DNS, HTTP, and TCP.
Why it matters: Network evidence is a key part of understanding attacker behavior and defender visibility.
3. Port Scanning & EnumerationCore
Purpose: Understand how scanning and enumeration work from an attacker perspective.
Why it matters: Students will learn how reconnaissance activity becomes detectable evidence in logs and network telemetry.
4. Log Analysis & EnrichmentCore
Purpose: Practice reviewing logs, identifying important fields, enriching events, and connecting related evidence.
Why it matters: This is one of the most important analyst skills for SOC, threat hunting, incident response, and detection engineering.
Optional Stretch Modules:
5. Hash Cracking
Review hash concepts, password security, and credential evidence.
6. Prompt Injection
Understand basic AI security risks and responsible AI workflows.
7. Breaking the Caesar Cipher
Lightweight warm-up lab for pattern recognition and basic crypto.
Pre-work expectations:
- Complete the core labs if possible to ensure smooth lab execution during live instruction.
- Optional labs are helpful stretch goals but not required.
- Take notes on commands, tools, or concepts that are new to you and bring questions to class.
2. Virtual Machine & Local Environment Setup Guides
The hosted labs are the primary environment for the live bootcamp. Local VM and Docker setups are backup options for students using x86 Windows, macOS Intel, and Linux systems. Platform-specific setup guides are provided below — choose the one that matches your operating system. If you are using a Mac with Apple Silicon (M1, M2, M3, M4, or newer), use the Apple Silicon Docker-based setup guide instead of the standard VM import process.
Blue vs. Red Bootcamp VM Setup Guides
Read the guide that matches your platform before importing the VMs. Each guide includes setup steps, recommended system requirements, architecture notes, and troubleshooting guidance.
Using Apple Silicon?
If your Mac uses an M1, M2, M3, M4, or newer processor, follow the Apple Silicon setup guide. The standard downloadable VMs are intended for x86 systems.
Hosted labs remain the primary bootcamp environment. Local VM and Docker setups are backup options.
Important VM Notes
- The hosted labs are the primary training environment.
- The VMs are backup/local options.
- Download large VM files before arriving onsite if possible.
- Standard VM setup is intended for x86 Windows, macOS Intel, and Linux systems.
- Mac Apple Silicon / ARM and Windows ARM users should follow the Docker-based guidance in the setup guide.
- Do not spend hours troubleshooting VM issues before class. If the hosted labs work, use the hosted labs as the main path.
- Verify the SHA256 checksum after download if possible.
- Bring your laptop charger and make sure you have enough disk space.

3. SkillBit CTF Platform Account
Required for bootcamp CTF challenges & capstone exercises
Students are required to create an account on the SkillBit CTF Platform (formerly MetaCTF) before class begins. This platform hosts interactive hands-on challenges, live scoreboards, and capstone team exercises during the bootcamp.
Platform URL: mctf.io/ignitecyber
- Sign up using the exact same email address you used to register for the DEF CON bootcamp.
- Verify your login and complete your profile setup prior to August 8.
- Once logged in, verify you can view the IgniteCyber bootcamp event dashboard.
4. Remote Hosted Lab Instance — RDP Connection
The hosted remote labs are the primary environment for the live bootcamp.
Students will receive two personalized RDP files by email: one for the Blue Analyst Lab at blue.opencyberlab.com and one for the Red Attack Simulation Lab at red.opencyberlab.com.
The Blue Lab is the primary analyst workspace for Jupyter notebooks, OpenSearch, telemetry review, detection engineering, reporting, and SkillBit challenge work. The Red Lab should only be used when instructed during controlled exercises.
RDP files will be sent by email.
Download your assigned Blue and Red .rdp files, keep them private, and do not share them in Discord or public tools.
If you are using Windows, double-click the .rdp file or open it with Remote Desktop Connection. If you are using macOS, install Microsoft Remote Desktop from the App Store and import the .rdp files.
Start with Blue. Use Red only when instructed.
For normal bootcamp work, use the Blue Analyst Lab. Use the Red Attack Simulation Lab only during instructor-directed activities.
Your personalized RDP connection files, IP addresses, usernames, and passwords will be sent via email and posted in the private student channel on Discord on Wednesday, August 5th, 2026.
- • Windows: Built-in Remote Desktop Connection (mstsc.exe)
- • macOS: Microsoft Remote Desktop (from App Store)
- • Linux: Remmina or FreeRDP (
xfreerdp)
💡 Connection Tip:
Test your RDP client prior to arriving in Las Vegas. Ensure your client supports TLS authentication and display resolution scaling.
Need Assistance with Lab Setup?
If you experience issues creating your SkillBit account or accessing OpenCyberLab, reach out on Discord or email instructor support.