Use advisories, standards and technical documentation to answer evidence-led questions without overstating what the sources prove.
Focused challenges designed to test judgment, evidence handling and defensible security decisions.
Free, independent knowledge assessments. Review the scope, preparation and scoring before you begin. Suggested times are study guidance; passing can earn a Threat Intelligence Lab platform certificate, not an accredited or third-party vendor qualification.
Start with a course check, a source-based investigation or a specialist topic.
Choose a focused assessment aligned with practical course material, from security awareness and cloud security to incident response and software supply chains.
8 assessments Work from sources Investigate real threat reportingUse advisories, standards and technical documentation to answer evidence-led questions without overstating what the sources prove.
62 assessments Think like an analyst Test your intelligence tradecraftAssess requirements, evidence evaluation, analysis, structured intelligence, actor profiling and decision-focused communication.
17 assessments Detect and respond Practice operational security decisionsChallenge your judgment across threat hunting, alert triage, detection engineering, incident reconstruction, forensics and recovery.
22 assessments Protect modern systems Assess trust across connected systemsTest cloud evidence, identity threats, third-party exposure, software dependencies and trusted-release decisions.
28 assessments Follow the operation Trace malicious behavior and infrastructureAnalyze malware behavior, ransomware operations, command infrastructure, delivery chains and defensible investigative pivots.
53 assessmentsUse FIRST's official EPSS documentation, API, and data guidance to retrieve exploitation probabilities, interpret percentiles, choose filters, and avoid treating EPSS as a complete risk score.
Review assessment : FIRST EPSS Data and API InvestigationResearch the authoritative CISA Known Exploited Vulnerabilities catalog, interpret its machine-readable fields, and turn catalog evidence into defensible vulnerability-prioritization decisions.
Review assessment : CISA KEV Catalog Technical Investigation