Capstone: Catch What Evaded the EDR
advanced Hands-on lab 90 min 3 tasksSubscription
An intrusion slipped past the endpoint product. Reconstruct it from the telemetry the evasion did not blind, and harden the detection.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-09-01