File size: 1,669 Bytes
35d1b92
 
 
 
 
 
 
 
 
5de5690
35d1b92
 
 
 
5de5690
35d1b92
 
 
 
5de5690
35d1b92
 
 
 
5de5690
35d1b92
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
name: sentinel_env
version: 2.0.0
entry_point: server.sentinel_env_environment:SentinelEnv
server_entry_point: server.app:app
tasks:
  - id: "easy-lockdown"
    difficulty: "easy"
    mode: "single-agent"
    objective: "Secure a public S3 bucket containing PII data"

  - id: "easy-secrets"
    difficulty: "easy"
    mode: "single-agent"
    objective: "Revoke and rotate a leaked API key found in a public GitHub repo"

  - id: "medium-access"
    difficulty: "medium"
    mode: "single-agent"
    objective: "Revoke admin IAM access to enforce least-privilege policy"

  - id: "medium-mfa"
    difficulty: "medium"
    mode: "single-agent"
    objective: "Enforce MFA on all 3 admin accounts with missing MFA"

  - id: "hard-breach"
    difficulty: "hard"
    mode: "single-agent"
    objective: "Block brute force attacker IP then close exposed port 22"

  - id: "critical-ransomware"
    difficulty: "hard"
    mode: "single-agent"
    objective: "Isolate encrypted server, revoke sessions, restore from backup"

  - id: "expert-apt"
    difficulty: "expert"
    mode: "single-agent"
    objective: "Detect C2 beacon, block outbound, isolate infected host, patch CVE"

  - id: "red-vs-blue"
    difficulty: "expert"
    mode: "multi-agent"
    objective: "Blue team stops Red team from exfiltrating secret data"
    agents:
      - role: "attacker"
        actions: ["port_scan", "privilege_escalation", "lateral_movement", "data_exfiltration", "hide_tracks"]
      - role: "scanner"
        actions: ["scan_logs", "flag_threat", "share_intel"]
      - role: "remediator"
        actions: ["block_ip", "close_port", "lockdown", "revoke_access", "restore_service"]