Loading
Practice containment and escalation decisions, evidence collection, and coordinating response during security incidents.
Interactive live labs
Real terminals and hosts right in your browser.
Realistic incidents
Raw logs and evidence as they reach a real SOC.
Instant review against senior-analyst criteria
Instant feedback on your decisions and reasoning.
Hands-on tasks like those an analyst receives on a real workday.
Contain ransomware within 30 minutes
Preserve evidence during an incident
Write a post-incident report
Open the shift
Review the evidence
Make the decision
Write analyst notes
Receive senior review
For people who want to handle active incidents under pressure.
From basics to challenge
Practice monitoring security alerts, analyzing logs, triaging incidents, and making escalation decisions inside a SOC.
Penetration testing5Practice interpreting penetration test results, reviewing scope, rating risk, and writing safe remediation advice.
GRCPractice reviewing risks, controls, policies, compliance, and security exceptions from a business perspective.
Cloud security18Practice reviewing cloud configuration, access permissions, external exposure, logs, and cloud environment risks.
Network security12Practice analyzing network alerts, reviewing firewalls, reading traffic, and assessing network infrastructure risk.
Threat hunting13Practice building hunting hypotheses, analyzing suspicious behavior, and correlating indicators before they become incidents.
Sign in with Google to unlock this specialty's tickets and live labs, and follow your progress and instant reviews.
Start free with Google