Background Image

Recon Network Defense Range

Threat hunting on live infrastructure with real attacks

"We do not rise to the level of our expectations, we fall to the level of our training"


Recon Network Defense Range (NDR)

Recon NDR is a blue team defense range that is as close to "the real thing" as it gets. This isn’t just another CTF. We’ve built this platform to train real-world responders to handle real-world situations. Our environment is a highly portable, fully functional replication of an enterprise environment, complete with all the trimmings - Active Directory, Exchange, distributed networks, various sensors, log aggregation, end-user simulation, and more.

Your team, your range.

The Recon NDR consists of live network infrastructure that can be tailored to reflect your environment, real attack scenarios chosen to be most relevant, and a full set of threat hunting tools to facilitate anything from log searches to advanced analytics. We configure, spin-up, host, and provide live support for events you design to meet specific learning objectives such as improve APT awareness, build skills, enhance teamwork, or test effectiveness.

What participants have to say