SOC Fundamentals & Log Sources
beginner Hands-on lab 35 min 3 tasksSubscription
Learn what a Security Operations Center does and get fluent in the canonical log sources every analyst lives in: authentication logs, Sysmon, firewall, and web server logs - and the specific events that actually matter.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-06-06