Choose from practical cybersecurity exams covering threat intelligence, incident response, cloud security, malware analysis and defensive research.
Focused challenges designed to test judgment, evidence handling and defensible security decisions.
Pick a focused route instead of searching through internal categories and advisory tags.
Choose a focused assessment aligned with practical course material, from security awareness and cloud security to incident response and software supply chains.
8 assessments Work from sources Investigate real threat reportingUse advisories, standards and technical documentation to answer evidence-led questions without overstating what the sources prove.
62 assessments Think like an analyst Test your intelligence tradecraftAssess requirements, evidence evaluation, analysis, structured intelligence, actor profiling and decision-focused communication.
17 assessments Detect and respond Practice operational security decisionsChallenge your judgment across threat hunting, alert triage, detection engineering, incident reconstruction, forensics and recovery.
22 assessments Protect modern systems Assess trust across connected systemsTest cloud evidence, identity threats, third-party exposure, software dependencies and trusted-release decisions.
28 assessments Follow the operation Trace malicious behavior and infrastructureAnalyze malware behavior, ransomware operations, command infrastructure, delivery chains and defensible investigative pivots.
53 assessmentsResearch Microsoft Entra and Microsoft Graph documentation to distinguish sign-in types, interpret risk and Conditional Access fields, understand aggregation, and avoid misreading identity evidence.
Review Microsoft Entra Sign-In Evidence InvestigationResearch CISA joint advisory AA24-038A to extract exact living-off-the-land commands, artifacts, ATT&CK mappings, persistence observations, and investigative implications from reported victim evidence.
Review CISA Joint Advisory Evidence Hunt: Volt TyphoonExtract vulnerability, product, impact, weakness, scoring, and affected-version evidence from a specific CISA industrial control systems advisory without substituting assumptions about operational exposure.
Review CISA ICS Advisory Technical InvestigationResearch the OASIS TAXII 2.1 standard to discover servers, interpret API roots and collection permissions, retrieve manifests, filter STIX objects, and handle protocol pagination correctly.
Review TAXII 2.1 API Technical InvestigationResearch the OASIS STIX 2.1 specification to model indicators, observed data, relationships, sightings, bundles, and object properties without confusing transport containers with intelligence assertions.
Review STIX 2.1 Object Modeling InvestigationInvestigate a live ATT&CK group record to connect aliases, techniques, procedure evidence, software, commands, vulnerabilities, and infrastructure into a sourced actor profile.
Review MITRE ATT&CK Group and Software InvestigationNavigate live MITRE ATT&CK technique pages to identify tactics, platforms, parent-child relationships, procedure evidence, and the difference between behavior categories and observed implementations.
Review MITRE ATT&CK Technique Page InvestigationResearch NIST's official NVD developer documentation to distinguish CVE publication from NVD enrichment, navigate CVE API responses, and build precise CPE and pagination queries.
Review NVD CVE, CPE, and API Record InvestigationNavigate FIRST's CVSS v4 specification and data representations to interpret metric groups, vector nomenclature, impact separation, and the role of supplemental context.
Review CVSS v4 Vector Technical ResearchUse FIRST's official EPSS documentation, API, and data guidance to retrieve exploitation probabilities, interpret percentiles, choose filters, and avoid treating EPSS as a complete risk score.
Review FIRST EPSS Data and API InvestigationResearch the authoritative CISA Known Exploited Vulnerabilities catalog, interpret its machine-readable fields, and turn catalog evidence into defensible vulnerability-prioritization decisions.
Review CISA KEV Catalog Technical Investigation
