SIEM Fundamentals: From Event to Search
intermediate Hands-on lab 45 min 3 tasksSubscription
Follow one event from the machine that wrote it to the alert an analyst sees, then search real SIEM data yourself: filter it, count it, and find who is behind a burst of failed logons.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-11-01