Classify the infection
An incident note just landed on your desk. Read what was observed, decide which type of malware you’re dealing with, then see how defenders respond. Every round deals new cases.
Practice for defenders. This lab trains the skills SOC analysts, incident responders and sysadmins use to protect systems. Everything runs in your browser. The companies, people, data and IP addresses are made up, and nothing here touches a real system. Only use security skills on systems you own or have written permission to test.
How defenders respond
Naming the type quickly tells you how urgent it is and which playbook to open. In every case, the first moves are the same: isolate, preserve evidence, report.
Which type of malware is it?