Hunting in Endpoint Logs
intermediate 45 min 3 tasksSubscription
Rules catch what you already know to look for. Hunting looks for what they missed, starting from a written hypothesis, and ends by turning what you found into a new rule.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-11-01