Take the controls. Solve the incident.

Not a quiz: a real SOC analyst shift. Investigate an incident from the artifacts —email, logs, a powershell -enc, C2 traffic—, decode them with the site's own tools, rebuild the kill chain, map it to MITRE ATT&CK and submit a verdict. All in your browser.