π = 3.14159265358979323846264338327950288…e^(iπ) + 1 = 0c ≡ mᵉ (mod n)K = gᵃᵇ mod py² = x³ + ax + b (mod p)H(X) = −Σ p(x) log₂ p(x)Σ₁(e) = (e ⋙ 6) ⊕ (e ⋙ 11) ⊕ (e ⋙ 25)φ(n) = (p − 1)(q − 1)2¹²⁸ ≈ 3.4 × 10³⁸a ⊕ b ⊕ b = a

01100010 0110 10100111 0001 00110101 1101 11010010 0110 01001101 1010 10110001 0011 01110100 1100 00101011 0111 11001010 0001 01010111 1010 10011100 0101 01100010 0110 10100111 0001 00110101 1101 11010010 0110 01001101 1010 10110001 0011 01110100 1100 00101011 0111 11001010 0001 01010111 1010 10011100 0101

> tls 1.3 handshake · verified > sha-256 9f2c…e41a · match > mfa challenge · approved > firewall 443/tcp · allow > dmarc pass · alignment ok > anomaly score 0.02 · normal > session token · rotated > backup restore test · passed > tls 1.3 handshake · verified > sha-256 9f2c…e41a · match > mfa challenge · approved > firewall 443/tcp · allow > dmarc pass · alignment ok > anomaly score 0.02 · normal > session token · rotated > backup restore test · passed

1011 00101101 0100 11100010 1110 01011001 0011 10100111 1001 01110010 0110 11001011 1011 00101101 0100 11100010 1110 01011001 0011 10100111 1001 01110010 0110 11001011

FREECAREER TRACKCareer track

SOC Analyst Track

Learn the reasoning behind alert triage and evidence-led investigation.

A path with a purpose

What you will practise

Recognize what an alert does and does not prove
Separate facts from assumptions
Write a concise incident note

Who this is for

Learners building from security foundations toward SOC analyst. Start with these free base lessons, then choose a released Pro exercise if you want deeper practice. The free lessons below are available without signing in.

Free now

Start the first lesson Explore free lessons

COMING NEXT

Coming next

Planned items are not part of the current collection and are not counted as available.

Alert triage lab with synthetic evidence
Log review and phishing investigation
Final assessed incident report