SOC Analyst studentsIntermediateMicrosoft 365 · Entra ID · Proxy
One click too many
A finance user signed in from Lagos and the Netherlands six minutes apart. Trace the phishing email, find out what the attacker set up, and lock them out.
C
Chiamaka · SOC shift lead
Impossible-travel alert on ada.okafor in Finance, plus a new inbox rule. She says she 'just updated her payroll details' this morning. Work it.
12:00 timed challenge. Available inside the SOC Analyst course. Want to try one now? Play “Knocking at the door” free →
Go further
Learn this properly in SOC Analyst.
Enrolled students get every lab in the course, saved progress and scores, and live sessions where instructors walk through how they'd handle each incident.