A class exercise run like the real thing: a live, defended target network, a fixed timeline, and other teams actively hunting me. It moves through the perimeter, into the DMZ, and finally onto the internal LAN with Domain Admin as the goal.

Because the blue team grades on what they detect, every significant action is logged and reported in real time, which changes how you move. Loud when it doesn't matter, quiet when it does.

Findings follow PTES methodology with CVSS scoring and MITRE ATT&CK tags, prioritized from low to critical the way a real assessment report would present them to a client.

The value isn't just popping boxes; it's the discipline of a repeatable workspace, a session log for every day, and a report someone could actually act on.