Threat Detection and Hunting

advanced3 labsSubscription

Proactively hunt adversaries your automated detections miss: hunting fundamentals, ATT&CK-technique hunts, and an undetected-intrusion capstone that ends in a new detection rule.

This path is available with a Purple Edge subscription. Sign in to read the full overview and start the labs.

Labs in this path

1
intermediate Hands-on lab Subscription
Threat Hunting Fundamentals
Hunt proactively: form a hypothesis about attacker behaviour and go looking before an alert fires.
40 min3 tasksblue-team
2
advanced Hands-on lab Subscription
Hunting Specific ATT&CK Techniques
Take a named MITRE ATT&CK technique and build a repeatable hunt for it across your estate.
55 min3 tasksblue-team
3
advanced Hands-on lab Subscription
Capstone: Find the Undetected Intrusion
An adversary is in the environment and no alert fired. Hunt them down and hand the finding to detection engineering.
85 min3 tasksblue-team

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free account Sign in to start

Updated 2026-09-01

Labs in this path

Threat Hunting Fundamentals

Hunting Specific ATT&CK Techniques

Capstone: Find the Undetected Intrusion

Unlock this lab