Alert Triage and Investigation
intermediate Hands-on lab 55 min 3 tasksSubscription
Work an alert queue like a SOC analyst: gather context before judging, decide true or false positive with evidence, pivot from one record to the next, and build the timeline of what happened.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-11-01