Step 1
Run your first focused SIEM query
Understand how scoped searches support fast triage.
Open command
Defensive
Beginner
Free
Beginner SOC Analyst
A practical defensive path that starts with log search, packet capture interpretation, and safe incident response habits.
New analysts learning triage, packet review, and SIEM search fundamentals.
0 of 4 complete
Step 2
Practice failed logon hunting
Use a predefined Splunk-style result without querying a real system.
Open labStep 3
Read packet capture commands
Learn how capture limits and interfaces shape investigation output.
Open command