PROLABDETECT · INVESTIGATE · EXPLAIN

SOC Analyst Track

Investigate a phishing report from first signal to a defensible analyst handoff. Practise with synthetic mail, web and identity evidence in the available guided lab.

The learning outcome

Produce a concise investigation record that another analyst can continue without guessing what happened.

1 available labAvailable now

Evidence-led practiceReasoning, decisions and review

Clear boundariesEducational preparation

Your route through the track

Available now

PROLABGuided lab · 60 minutes

SOC Analyst Lab 1 — Phishing Triage

A complete guided phishing case: correlate email, proxy and identity evidence, write a triage decision, and compare every answer with the worked reasoning.

Synthetic evidence, learner tasks and complete worked reviews.

What you can do today

  • Review sender and message context
  • Interpret authentication results without treating them as proof of safety
  • Recommend reporting and containment steps

Work through the supplied fictional evidence, write your decisions and compare them with complete worked answers. Use the review rubric and practical takeaway to improve your next handoff. These are self-directed guided exercises, without individual marking or a saved completion record.

Coming next 4 planned modules

These modules are planned for the expanding Pro curriculum and are not counted as available content yet.

Release timing will be announced when each module is ready.

Reference framework

Study references for this curriculum. The practice banks use broad study categories and do not claim exact official exam-objective coverage.