Alert-Driven Investigations in SOC

Transition from theory to practice. Learn the step-by-step process of triaging real-world alerts, verifying true positives, and uncovering the root cause of threats.

VPN Brute Force Investigation

Investigate and triage a VPN brute force attack targeting a corporate user account.

6 Tasks

Enter Room

Suspicious PowerShell Activity Investigation

Dive deep into fileless attack vectors. Learn to decode Base64 encoded commands, identify obfuscation techniques, and use PowerShell Script Block Logging to uncover malicious intent.

8 Tasks

Enter Room

Phishing Email Investigation

Learn the art of triaging suspicious emails. Learn to analyze email headers, extract malicious URLs/attachments, and use mail security gateways to hunt for other recipients of the same campaign.

6 Tasks

Enter Room

Malware Investigation Challenge

Follow the lifecycle of a malware alert from EDR detection to host isolation. Learn to analyze file hashes, check sandbox reports, and determine the "blast radius" of an infection.

5 Tasks

Enter Room

Credential Dumping Investigation Challenge

Investigate attempts to steal sensitive identity data. Learn to detect unauthorized access to LSASS, use of tools like Mimikatz, and suspicious registry queries targeting SAM hives.

5 Tasks

Enter Room

Impossible Travel Investigation Challenge

Analyze anomalies in user behavior such as "Impossible Travel," suspicious privilege escalations, and first-time access to sensitive resources or administrative shares.

5 Tasks

Enter Room

Alert-Driven Investigations in SOC

VPN Brute Force Investigation

Suspicious PowerShell Activity Investigation

Phishing Email Investigation

Malware Investigation Challenge

Credential Dumping Investigation Challenge

Impossible Travel Investigation Challenge

CYBRIXEN Assistant

Welcome to CYBRIXEN Assistant

Contact Support Team