SOC Missions

Investigate live alerts like it's your first day on the job

Immersive, story-driven cyber attack simulations that put you inside a real Security Operations Center.

Realistic alerts

Every mission starts with a real-looking alert dropped into your queue — no toy data.

Investigate freely

Pivot through logs, enrich indicators, and build timelines using browser-based tooling.

Document & escalate

Record your findings and reach a verdict, exactly as you would on a real SOC team.

AI-graded feedback

The AI Senior Analyst reviews your work, scores your triage, and shows what you missed.

Featured missions

A growing library of breach scenarios

Start simple and work up to advanced APT hunts and cloud intrusions.

MSN-01Beginner

The Phishing Foothold

A finance employee clicked a link. Trace the initial access, identify the payload, and contain the host.

PhishingEmailEndpoint
MSN-02Intermediate

Beacon in the Night

Recurring outbound traffic hints at C2. Correlate proxy logs and confirm the compromise before it spreads.

C2NetworkCorrelation
MSN-03Advanced

Ransom Countdown

Mass file encryption is underway. Reconstruct the kill chain and scope the blast radius under pressure.

RansomwareDFIRContainment
MSN-04Intermediate

The Insider Anomaly

Off-hours access to sensitive shares. Separate legitimate activity from data staging and exfiltration.

InsiderUEBAExfiltration
MSN-05Advanced

Living off the Land

No malware, only native tooling. Hunt an APT abusing PowerShell and WMI to move laterally.

APTThreat HuntingLOLBins
MSN-06Advanced

Cloud Break-In

Anomalous IAM activity in AWS. Follow the trail from exposed keys to privilege escalation.

CloudAWSIAM

How it works

Learn by investigating, not memorizing

Every mission follows the real analyst loop so the skills you build transfer directly to the job.

01

Receive a live alert

A story-driven incident lands in your queue — just like your first day in a real SOC.

02

Investigate & correlate

Pivot through logs, enrich IOCs, and build a timeline using browser-based labs and tooling.

03

Reach a verdict

Decide true or false positive, document your findings, and escalate when it matters.

04

Get AI feedback

The AI Senior Analyst grades your work, highlights gaps, and guides you to the next mission.

Start your SOC analyst journey today

Create a free account, investigate your first live alert, and get instant feedback from the AI Senior Analyst.