Loading
Practice monitoring security alerts, analyzing logs, triaging incidents, and making escalation decisions inside a SOC.
Interactive live labs
Real terminals and hosts right in your browser.
Realistic incidents
Raw logs and evidence as they reach a real SOC.
Instant review against senior-analyst criteria
Instant feedback on your decisions and reasoning.
Hands-on tasks like those an analyst receives on a real workday.
Impossible-travel alert on an employee account
Phishing email targeting the CFO
Encoded PowerShell from a developer's laptop
Open the shift
Review the evidence
Make the decision
Write analyst notes
Receive senior review
For anyone working in, or preparing to join, a SOC or Blue Team.
From basics to challenge
Practice interpreting penetration test results, reviewing scope, rating risk, and writing safe remediation advice.
GRCPractice reviewing risks, controls, policies, compliance, and security exceptions from a business perspective.
Cloud security18Practice reviewing cloud configuration, access permissions, external exposure, logs, and cloud environment risks.
Network security12Practice analyzing network alerts, reviewing firewalls, reading traffic, and assessing network infrastructure risk.
Incident response17Practice containment and escalation decisions, evidence collection, and coordinating response during security incidents.
Threat hunting13Practice building hunting hypotheses, analyzing suspicious behavior, and correlating indicators before they become incidents.
Sign in with Google to unlock this specialty's tickets and live labs, and follow your progress and instant reviews.
Start free with Google