Preface

This is a series of scripts and GUI's that allow you to setup your own CyberPatriot style competition images and easily configure to detect for changes and award points!

This software was built with the intention of helping develop cybersecurity intrests within elementary schools in my local area, however as this software has developed it is now capable to be used for team trainings for competitions such as CyberPatriot (middle school level only though).

Note: Although there is a engine cleanup feature, I still would not recommend running this on your host machine.

Demo

2023-04-12.17-30-43.mp4

Features

• Complete security policy rewrite (customizable, through policies.cfg)
• Automatic program installation (though not recommended, due to varying load times causing the scoring engine to halt)
• Themed scoring GUI hosted on local html file
• Deleted user, files, and folder detection (customizable)
• Changed security policy detection (customizable)
• Firewall enabled detection and individual inbound/outbound rule checks (customizable)
• Full image cleanup (deletes or fixes all accounts, files, and security policy changes)
• Customizable forensics questions (text-based answering)
• Freedom to change and edit the scoring page appearance through HTML and CSS. (Feel free to use any other tech stack as you see fit)

Setup

Download a blank Windows virtual machine:

Disable "Virtualize Intel VT-x/EPT or AMD-V/RVI" on the CPU is using a nested virtual machine.

Run Powershell ISE as administrator.

Run "Set-ExecutionPolicy RemoteSigned" and click "Yes to All"

Run "Install-Module -Name BurntToast -RequiredVersion 0.8.5" <- Toast Notification Manager

Install NuGet Provider if prompted and trust all "unfilted repositories" if prompted.

Install Google Chrome.

Adjust your settings.json file as you see fit (make sure paths are all set)

Navigate to local repository folder.

Run .\setup.ps1 to initiate the scoring engine. (This will start adding / changing local security policies, files, and firewalls)

Done!

Add a reset.txt file in the repository folder to initiate image clean-up.

Roadmap

I plan to continue developing this scoring engine for future teams to use, and it will include the following features:

• Audit change detection
• Netstat log detection
• Registry changes

This software is built and maintained by Nathan Che.