WORKSPACE
Lab Topology
Four hosts on the isolated segment 10.10.10.0/24. No uplink, no NAT, no route to the home LAN.
Network Map
SUB 10.10.10.0/24DC01.LAB
- Role
- Domain Controller — AD DS, DNS, GPO
- OS
- Windows Server 2022
- Status
- online
- Notes
- Primary DC for lab.local. Holds all FSMO roles. DNS forwarders disabled.
FS01.LAB
- Role
- File Server — SMB shares, DFS namespace
- OS
- Windows Server 2022
- Status
- idle
- Notes
- Hosts \\FS01\Finance and \\FS01\HR shares with intentionally loose ACLs for enumeration practice.
WIN01.LAB
- Role
- Domain-joined workstation
- OS
- Windows 11 22H2
- Status
- idle
- Notes
- Represents a standard end-user endpoint. Runs Sysmon + Winlogbeat forwarding to LINUX01.
LINUX01
- Role
- Operator / logging / capture host
- OS
- Debian 12
- Status
- alert
- Notes
- Kali-flavored toolkit, tcpdump, Elastic + Kibana, C2 staging directory /opt/c2. Never leaves the isolated segment.