Skip to main content
Starting Point
Updated over 2 months ago

Completing your first lab

By the end of this short guide, you will be on track to complete your first blue team investigation. Let’s dig in!

Loading into Your First Lab

  1. Begin by selecting the first lab from the Starting Point path.

  2. Start the cloud machine. It will have all necessary tools and artifacts for the investigation. then review the Introduction section of the lab.

    • You’ll be matched with the closest server location automatically to ensure a smooth, lag-free experience.

  3. Review the Introduction section while you wait for the machine to launch.

    • This section will help you get familiar with the lab's setup and objectives.

  4. Inside the machine, locate the "Start Here" folder.

    • This folder contains all tools, artifacts, and helpful instructions to guide your investigation.

Side note: Free users are given 10 hours of cloud machine time per month. You can subscribe at any time to get unlimited access to cloud machines.


Utilize Learning Resources to Succeed

We’re committed to helping you succeed, so take advantage of these resources as you work through the labs:

  1. Lab Walkthroughs: Utilize the official walkthrough or any of the quality community writeups available in the lab page left sidebar to learn the fundamentals and get a step-by-step guide on how to complete the lab.

  2. Hints: Each lab question may include hints to help you without giving away the full solution. Use them when you need a nudge in the right direction.

  3. Community Support: If you're still unsure, join the discussion! Each lab has a dedicated thread on our Discord server where you can ask questions and seek guidance from fellow users. Click the "Need Help?" button at the top of the lab page, and then select "Join Our Discord" to dive into the conversation.


Pro Tip: Save Time with Copy and Paste

You can easily copy and paste between your local machine and the cloud machine. Here's a quick showcase of how to enable it:

  1. Click on the lock icon in the URL bar of your browser to access site settings.

  2. Find and enable the 'Clipboard' setting to allow copy-paste operations between the lab environment and your local machine.


Ready to Dive In?

Get started with your first lab and utilize the learning resources to sharpen your blue team skills. Happy investigating!

Did this answer your question?