Season 0 is completely free
Episode 3 of 5
Follow the Thread
Tuesday, 3:30 PM. One email. Six recipients. One of them clicked. Now you need to figure out what happened next.
35-45 min
Beginner
Browser-based — no VMs
Log/SIEM Analysis
What you'll practice
This episode focuses on the investigation skills below. Sign up to work the live case — no spoilers, answers, or IOCs are shown here.
Log/SIEM Analysis
Correlate SIEM events into a timeline and follow the attack across systems.
Correlate SIEM logs to build attack timelines
Season Zero progression
Follow one incident from first alert to containment across five episodes.