Hunting in Endpoint Logs

intermediate Hands-on lab 45 min 3 tasksSubscription

Run a hypothesis-driven threat hunt across Sysmon endpoint telemetry to surface LOLBin abuse and anomalous parent-child process chains.

This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.

Part of these paths

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Updated 2026-06-06