Every scenario is a real alert from the Northgate estate. Take it from intake through investigation against live telemetry to a containment decision and a written record. Scored throughout, with the reasoning behind each call.
—Scenarios
—Hours of work
50Corpus tables
213KRows of telemetry
Intake→Investigate→Preserve→Contain→Report
—
SOC Simulator v1.0This lab is actively developed. Hit a bug or something that doesn't look right?