Skip to content

rooms.md

Latest commit

 

History

History
61 lines (42 loc) · 3.24 KB

rooms.md

File metadata and controls

61 lines (42 loc) · 3.24 KB
Raw

Rooms: Attacks and Defenses

Room 1: The CIA Triad

Room URL: https://tryhackme.com/room/ciatriad

Description: This room introduces the CIA Triad — Confidentiality, Integrity, and Availability — the cornerstone of information security. Students learn how each principle is applied in real-world scenarios: confidentiality through encryption and access controls, integrity through hashing and version control, and availability through redundancy and backup strategies. The room covers how security professionals use the CIA Triad to evaluate risks, classify data, and design secure systems.

Key Topics:

  • Confidentiality principles and controls
  • Integrity principles and controls
  • Availability principles and controls
  • Real-world CIA breach examples
  • Balancing CIA trade-offs

Room 2: Cryptography Concepts

Room URL: https://tryhackme.com/room/cryptographyconcepts

Description: This room covers fundamental cryptography concepts that underpin modern information security. Students learn the difference between symmetric encryption (same key for encrypt/decrypt) and asymmetric encryption (public/private key pairs), hashing algorithms and their properties (collision resistance, preimage resistance), digital signatures, and the role of certificates and PKI. The room emphasises practical understanding over mathematical detail, preparing students to make informed decisions about cryptographic controls.

Key Topics:

  • Symmetric encryption (AES, DES)
  • Asymmetric encryption (RSA, ECC)
  • Hashing algorithms (SHA, MD5)
  • Digital signatures
  • Public Key Infrastructure (PKI)
  • Encryption vs encoding vs hashing

Room 3: Become a Hacker

Room URL: https://tryhackme.com/room/becomeahacker

Description: This room provides a hands-on introduction to offensive security techniques. Students learn about the Cyber Kill Chain framework (Reconnaissance, Weaponisation, Delivery, Exploitation, Installation, C2, Actions on Objectives) and the MITRE ATT&CK framework. The room includes a practical command injection exercise where students exploit a vulnerable web application that passes user input unsanitised to a system shell. This demonstrates how input validation failures lead to remote code execution.

Key Topics:

  • Cyber Kill Chain (Lockheed Martin)
  • MITRE ATT&CK framework overview
  • Command injection attacks
  • Input validation importance
  • OS command vs code injection

Room 4: Become a Defender

Room URL: https://tryhackme.com/room/becomeadefender

Description: This room provides a hands-on introduction to defensive security operations. Students learn about Security Operations Centres (SOCs), SIEM platforms, and EDR solutions. The room includes a simulated incident response exercise (FakeBank scenario) where students detect an ongoing breach, analyse indicators of compromise, contain the threat, and document findings. The incident response phases — Detection, Analysis, Containment, Eradication, Recovery, and Lessons Learned — are explored in a practical, engaging format.

Key Topics:

  • Security Operations Centre (SOC) operations
  • SIEM and EDR tools
  • Incident response phases
  • Indicator of Compromise (IoC) analysis
  • Defence in depth strategy
  • Security control types (preventive, detective, corrective)