INTERACTIVE TRAINING · LOCAL BROWSER

Investigate the alert. Explain your decision.

Work through seven fictional SOC investigations, analyse event evidence, document findings and receive evidence-based coaching. Save progress on this device only, or export a report.

SIMULATION ONLYNO LIVE TELEMETRY

SIMULATED LAB: All logs, identities and indicators are invented or documentation-only. This page does not access your devices, honeypot, accounts or live network. Progress is stored only in this browser if you choose to save it.

1. Choose an investigation

Seven fictional incident types · No live telemetry

Scenario

EVENTS

4

SOURCE (FICTIONAL)

—

TRIAGE STATUS

Needs review

Event evidence

Time	Log source	Observed event	Outcome

2. Record your assessment

ClassificationSeverityConfidence

Suggested answers are training references, not real-world severity rules. Context and local playbooks may change an assessment.

Observations and evidenceRecommended next steps

Select a case, review the events and write your findings.

3. Your local investigation history

Optional browser-only history. Nothing is uploaded. Clearing browser site data may erase it. Do not enter personal or sensitive information.

SAVED ASSESSMENTS

0

SCENARIOS PRACTISED

0 / 7

LATEST TRAINING SCORE

—

How the feedback works

Scoring rewards a reasonable classification, severity, calibrated confidence, specific observations and actionable next steps. It is an educational rubric, not a certification, AI analysis or proof of professional competency. Written feedback uses keyword hints and cannot fully judge the quality of your reasoning.

Read the worked investigation case studies →