Alert triage

You’re on shift in a Security Operations Centre. Eight alerts are waiting. Read each one, decide whether it’s benign or needs escalating, and see how an experienced analyst would call it. Every shift is different.

Practice for defenders. This lab trains the skills SOC analysts, incident responders and sysadmins use to protect systems. Everything runs in your browser. The companies, people, data and IP addresses are made up, and nothing here touches a real system. Only use security skills on systems you own or have written permission to test.

Alert queue0 right · 8 left