Season 0 is completely free
Episode 2 of 5
Inbox Zero
Tuesday, 9:55 AM. Yesterday's Finance alert is your first ticket: three copies of one supplier invoice. Read it, look it up, and find out how far it went.
40-50 min
Beginner
Browser-based — no VMs
Email Analysis
Threat Intelligence
Log/SIEM Analysis
What you'll practice
This episode focuses on the investigation skills below. Sign up to work the live case — no spoilers, answers, or IOCs are shown here.
Email Analysis
Inspect phishing emails, headers, and indicators the way a SOC email specialist would.
Threat Intelligence
Cross-check IOCs and campaign context to decide what is noise and what is real.
Log/SIEM Analysis
Correlate SIEM events into a timeline and follow the attack across systems.
Analyze phishing emails and extract IOCs
Correlate SIEM logs to build attack timelines
Season Zero progression
Follow one incident from first alert to containment across five episodes.