Alert Triage & Investigation
intermediate Hands-on lab 50 min 3 tasksSubscription
Work a fired alert end to end the way a Tier-1 analyst does: pivot from the alert to the host, to the process, to a verdict - extracting IOCs and reaching a defensible disposition.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-06-06