soc · beginner
Structured SOC beginner learning room covering alerts, events, triage.
Login required to start this lab and save your progress.
Section 1 · 1 tasks
This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.
Apply the alerts and events concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.
Section 2 · 1 tasks
This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.
Apply the events and triage concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.
Section 3 · 1 tasks
This section uses a fictional, authorized training scenario. Study the concepts, compare the example evidence, and record what is observed versus what is inferred.
Apply the triage and escalation concepts to a bounded exercise. Do not contact real systems, use real credentials, or execute destructive actions.
