Investigate a phishing report from first signal to a defensible analyst handoff. Practise with synthetic mail, web and identity evidence in the available guided lab.
The learning outcome
Produce a concise investigation record that another analyst can continue without guessing what happened.
1 available labAvailable now
Evidence-led practiceReasoning, decisions and review
A complete guided phishing case: correlate email, proxy and identity evidence, write a triage decision, and compare every answer with the worked reasoning.
Synthetic evidence, learner tasks and complete worked reviews.
Interpret authentication results without treating them as proof of safety
Recommend reporting and containment steps
Work through the supplied fictional evidence, write your decisions and compare them with complete worked answers. Use the review rubric and practical takeaway to improve your next handoff. These are self-directed guided exercises, without individual marking or a saved completion record.
Coming next 4 planned modules
These modules are planned for the expanding Pro curriculum and are not counted as available content yet.