Cybersecurity · hands-on lab
SOC Lab 08: End-to-End SOC Investigation
Tie it together: correlate the brute-force, the scan and the web attacks to one attacker and write the incident report.
- 45 minutesTime in the lab
- advancedLevel
- 4 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. Capstone. One IP keeps showing up across your detections. You confirm the common attacker, build the timeline, and write the incident report a SOC would hand to management.
What you will do
- Find the common attacker
- Build the evidence count
- Write the incident report
- What makes it an investigation?question
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.