Halftime Sensor Lab

Description:

The purpose of this lab is to dive deep into the capabilities of the Wiz Sensor, both as a defender and an attacker.

Attack Overview:

Setup:

1. Copy the .env.template file

cp .env.template .env

2. Edit the .env file and add the credentials

   • For registry credentials, navigate here.
   • For the K8s service account, navigate here and select "Complete Kubernetes Integration"

3. Set your environment

source .env

4. Change into the Terraform directory

cd terraform

5. Run Terraform

terraform init
terraform apply

6. Generate the lab guide from the Terraform output

cd ../scripts/
./generate_lab_guide.sh

7. Navigate to the Lab guide in VSCode in Preview (right click > Open Preview)

Lab Prequisites:

• The lab requires the following:
  • SSH (for the attacker C2 & post-exploitation)
  • Web Browser (Chrome, Firefox, Safari, or similar)
  • Wiz Tenant w/ AWS Connector Setup

Dependencies:

• Terraform
• Helm
• gettext

The generate_lab_guide.sh script uses envsubst from the gettext package. You can install it with Homebrew:

brew install gettext
brew link --force gettext