YOUR NEXT FREE CHALLENGE
Operation Last Light
Five free ransomware-response missions. Contain the damage, question the backup and earn a safer way back.
Explore free campaign : Operation Last LightFree to play. No subscription needed.CYBER THREAT INTELLIGENCE, PUT INTO PRACTICE
Go from knowing the theory to knowing your next move. Build practical skills with free courses, realistic missions, and assessments that help you see what to strengthen.
Start free. Learn at your pace. Put it into practice.
Explore Solo & Teams memberships →Individual learners / Security professionals / Teams
SIMULATED ENVIRONMENT. REAL DECISIONS.
Investigate what happened. Decide what to do.
See where your choices lead.
Understand the thinking
behind the technique.
Work through evidence.
Make a defensible call.
Know what went well.
Find your next step.
registered learners
125 exams passed
TIL FIELD OPERATIONS
Investigate real-world scenarios. Follow the evidence. Make the call.
YOUR NEXT FREE CHALLENGE
Five free ransomware-response missions. Contain the damage, question the backup and earn a safer way back.
Explore free campaign : Operation Last LightFree to play. No subscription needed.The queues are growing. The tills still work. Follow a payment incident from the first alert to the reopening vote.
The patch is green. The peer is ready. The incident is not over. Earn every step back to service.
The build is green. The signature is valid. The update is already outside. Follow a supply-chain incident from a moved tag to the release you can defend.
BUILD THE FOUNDATION
Explore free courses. Build knowledge you can bring into your next investigation.
Follow authority through tokens, control planes, SaaS applications, messages, sharing, and business decisions where a stable host perimeter no longer explains t...
Explore course : Cloud, Identity, SaaS, and Business Workflow DetectionLearn how decoys create controlled security claims, why a rare trigger still needs context, and how deception can produce defensible learning without becoming t...
Explore course : Deception Engineering and High-Confidence SignalsLearn how a detection earns and keeps confidence through layered validation, health monitoring, useful measurement, controlled exceptions, and evidence-based re...
Explore course : Detection Assurance and OperationsTIL TEAMS / DEVELOP TOGETHER
Bring learning, assessments, and progress into one workspace. Give people a useful next step—and give managers a clearer view of where support is needed.
€19.00 per seat/month excluding VAT · 5-seat minimum.
€114.95/month including 21% VAT for 5 seats.
CAPABILITY OVERVIEW
Review gaps. Assign learning. Follow progress.
Illustration only. Explore the preview for a fictional team’s full workflow.
CHECK YOUR UNDERSTANDING
Use free assessments to test your knowledge and guide your learning.
KEEP YOUR CURIOSITY SHARP
The latest practical guides from the resource library.
A practical top-ten checklist for building endpoint security that prevents common attacks, detects suspicious behavior, supports investigation, and recovers safely.
Create a Microsoft Purview DLP policy that protects sensitive data without breaking legitimate work. This guide covers prerequisites, scope, rules, policy tips, simulation, staged enforcemen...
Understand exactly how Microsoft Purview turns business rules into labels, classification, retention, DLP, SharePoint, Microsoft 365, and Copilot controls—and where E3 ends, E5 begins, and...
STAY CURIOUS. FOLLOW THE EVIDENCE.THREAT INTELLIGENCE LAB
We make practical cybersecurity knowledge accessible. Courses to build understanding. Missions to put it to work. Specialist support when your organization needs a hand.
Our courses and exams are free. Free mission campaigns are clearly labelled, and you can explore them without a paid subscription. Create an account to keep your learning progress.
Solo membership grants access to paid missions for €20/month including VAT. Eligible TIL Teams members also have access. Review mission access and subscription details.
Missions are authored simulations with fictional organizations and safely inspectable evidence, informed by real incident patterns. Your decisions shape the scenario and its debrief; no real systems are targeted.
Yes. TIL Teams brings learning paths, assignments, and reporting into one workspace. Try the fictional team preview before choosing a plan.
READY FOR THE NEXT STEP?
Choose Solo for every paid mission. Choose Teams for shared learning, assignments, and a clearer view of progress.
FOR YOUR OWN DEVELOPMENT
Go deeper. Every paid mission, ready when you are.
One individual account. Renews monthly until cancelled.
View Solo membership Preview paid campaigns →New Solo checkout is currently unavailable. You can still explore the missions.
FOR MANAGERS & SECURITY TEAMS
Develop together. See where to focus next.
For 5 seats. €19.00 per seat/month excluding VAT.
5-seat minimum. Review your full total before PayPal approval.
Choose your team plan Explore the Teams preview →YOUR NEXT STEP STARTS HERE
Build your knowledge. Test your thinking. Come back stronger.