Phishing Email Investigation
Analyze message headers, domain differences and urgent requests. Decide how to verify and report a suspicious email.
Open phishing labPractical Labs
Progress from guided beginner exercises to deeper, role-based practice as new labs are developed. The Level 1 exercises below are available now and are also linked inside Cyber Security Fundamentals.
Current labs use fictional, static data. They do not access live systems, store answers or award separate credentials. Complete them responsibly within the authorized learning environment.
Level 1 — Fundamentals
Understand the evidence, identify risk and recommend safe next steps.
Linux File Permission Review
Interpret mode bits, identify excessive access and recommend a reversible configuration review.
Open Linux labCloud IAM Least-Privilege Review
Find wildcard resources and unrelated administrative actions in a fictional service policy.
Open IAM labSOC Alert Triage
Correlate fictional sign-in events and mailbox changes, choose a priority and draft an incident escalation note.
Open SOC triage labThese four labs are also part of the Cyber Security Fundamentals learning journey. Their optional practice feedback does not determine final-exam or certificate eligibility.
Level 2 — Applied Investigations
Planned: longer, multi-event investigations with structured reports and greater independence.
Network Traffic Analysis
Investigate an authorized, sanitized packet dataset and explain protocol behavior.
Security Incident Timeline
Correlate multiple fictional logs and prepare an evidence-backed incident report.
Level 3 — Career-Focused Labs
Future role-specific capstones and supervised or reviewed work. Pricing and eligibility have not been finalized.
SOC Analyst Investigation Capstone
Work through a complete authorized case, including evidence collection, triage, decision-making and written escalation.
Cloud Security Review Capstone
Identify configuration risks in a contained scenario and propose tested remediations.