Blue Team Training Toolkit

Blue Team Training Toolkit (BT3) is software for defensive security training, which will bring your network analysis training sessions, incident response drills and red team engagements to a new level. The toolkit allows you to create realistic computer attack scenarios, while reducing infrastructure costs, implementation time and risk.

Frequently Asked Questions (FAQ)

  • How do I download training materials?
    The training materials available for download can be listed directly from the Blue Team Training Toolkit (BT3). Each BT3 module has a command that will let you list the training materials (show profiles / show pcaps / show mockfiles).

    You may check section 3.1 / 4.1 / 5.1 of the BT3 official documentation for detailed examples with each module. Please, note that you need to authenticate first with your BT3 API account, in order to see the training material available for download.


  • How do I download premium training materials?
    If you want to download premium training materials, you will need to purchase content credits. After you send your purchase order, we will send you a PayPal invoice. The invoice can be paid with your PayPal account or credit card (via PayPal).

    After the invoice is paid, you will receive a voucher code with the content credits that you purchased. The voucher can be redeemed directly from the Blue Team Training Toolkit. Please, note that the payment verification process is currently done manually.


  • What is the cost of the training material?
    The cost of the training material is shown in the material list displayed by the Blue Team Training Toolkit. The cost of a training material will be deducted from your content credit balance automatically upon download.

    If you are an enterprise user, the cost of a given training material is deducted from your credit balance only for the first download. Subsequent downloads of the same training material are free for enterprise users.


  • Are there any hidden costs?
    The only cost associated with the Blue Team Training Toolkit is what you pay for content credits. We do not charge any additional costs.


  • What currency can I use for paying content credits?
    The currency we use is Norwegian Krone (NOK) for customers located in Norway, and US Dollars for international customers.


  • When will I get access to the content credits?
    The content credits will be available in your BT3 API account as soon as the voucher is redeemed.


  • What is the difference between Personal License and Enterprise License?
    Training materials are the same for personal and enterprise users. However, the license terms and the credit deduction model are different.

    Personal License
    Use for personal purpose only, as part of individual training or other approved non-commercial activities.

    Enterprise License
    Use for the needs within your company, as part of security engagements, training, or other approved commercial activities.

    Learn more about pricing and license terms.


  • How to change from Personal License to Enterprise License?
    If you have been using the Blue Team Training Toolkit (BT3) for personal training, and now want to move to an Enterprise License for your company, the best option is to create a new BT3 API account and choose Enterprise License. You may follow the steps described in section 2.4 of the BT3 official documentation.