Capstone: Reconstruct the Intrusion
intermediate Hands-on lab 90 min 3 tasksSubscription
A new incident, a full evidence set, and one question: what happened? Verify the evidence, rebuild the story, prove each finding twice, recommend what to do, and capture the case flag.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-11-01